[tor-bugs] #11333 [Firefox Patch Issues]: Audit requestAnimationFrame() and possible timing attacks

[Tor Bug Tracker & Wiki]

#11333: Audit requestAnimationFrame() and possible timing attacks
--------------------------------------+-----------------------
     Reporter:  gk                    |      Owner:  mikeperry
         Type:  task                  |     Status:  new
     Priority:  major                 |  Milestone:
    Component:  Firefox Patch Issues  |    Version:
   Resolution:                        |   Keywords:
Actual Points:                        |  Parent ID:  #3059
       Points:                        |
--------------------------------------+-----------------------
Description changed by gk:

Old description:

> We should investigate how effective the timing attacks are against Tor
> Browser if we time the rendering process with requestAnimationFrame().
>
> Some examples to study are mentioned in:
>
> https://dl.acm.org/citation.cfm?id=2516712
> http://www.contextis.com/files/Browser_Timing_Attacks.pdf
>
> Ideally, the audit would contain suggestions on how to mitigate possible
> issues.

New description:

 We should investigate how effective timing attacks are against Tor Browser
 if we time the rendering process with requestAnimationFrame().

 Some examples to study are mentioned in:

 https://dl.acm.org/citation.cfm?id=2516712
 http://www.contextis.com/files/Browser_Timing_Attacks.pdf

 Ideally, the audit would contain suggestions on how to mitigate possible
 issues.

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11333#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online