Paper gives DM-RSA-OAEP a formal fault-detection security treatment
IND-CCA2 security is bounded by the weaker RSA-OAEP instance, and detection fails if both moduli share one chip’s faults.
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #oaep
VU#431093: TCG TPM 2.0 reference code found vulnerable to information leakage and timing side-channel attacks
CERT/CC discloses two TPM 2.0 reference code flaws allowing RSA key decryption and forged TPM attestations via crafted commands.