[tor-bugs] #11050 [Obfsproxy]: pycrypto's AES implementation is not constant time

[Tor Bug Tracker & Wiki]

#11050: pycrypto's AES implementation is not constant time
---------------------------+-----------------------------------------
     Reporter:  yawning    |      Owner:  asn
         Type:  defect     |     Status:  new
     Priority:  normal     |  Milestone:
    Component:  Obfsproxy  |    Version:
   Resolution:             |   Keywords:  AES, cache timing, pycrypto
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+-----------------------------------------

Comment (by lukep):

 We could write cache timing attack resistant version of AES for pycrypto,
 eg. this one:

 http://academic.research.microsoft.com/Publication/4247637/a-fast-and-
 cache-timing-resistant-implementation-of-the-aes

 It uses no table lookups so no timing attack, and 4x parallel bit slicing
 so is fast too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11050#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online