MIME-Version: 1.0
In-Reply-To: <1497342000.6068.3.camel@sipsolutions.net>
References: <20170610025912.6499-1-Jason@zx2c4.com> <20170610025912.6499-7-Jason@zx2c4.com>
 <1497342000.6068.3.camel@sipsolutions.net>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Tue, 13 Jun 2017 15:28:15 +0200
Message-ID: <CAHmME9pJEwPvpNMGc9KCH15BNO8qRNCEw2Mh4nUjVK0c2X30kA@mail.gmail.com>
Subject: Re: [PATCH 6/6] mac80211/wpa: use constant time memory comparison for MACs
To: Johannes Berg <johannes@sipsolutions.net>
Cc: LKML <linux-kernel@vger.kernel.org>,
        kernel-hardening@lists.openwall.com, linux-wireless@vger.kernel.org,
        stable@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 467
Lines: 13

On Tue, Jun 13, 2017 at 10:20 AM, Johannes Berg
<johannes@sipsolutions.net> wrote:
> I'm not really sure that this is actually true, since you don't get
> much feedback on your frame that's dropped, especially if you're
> attacking from remote. Basically, I don't see how you can observe the
> timing of this operation?

There have been practical attacks published before that relied on
jitter coming from simultaneous operations.

> Anyway, applied.

Great, thanks.