|
|
Log in / Subscribe / Register

Password entry without keystroke timing

Password entry without keystroke timing

Posted Mar 13, 2026 16:38 UTC (Fri) by runekock (subscriber, #50229)
In reply to: Password entry without keystroke timing by epa
Parent article: More timing side-channels for the page cache

The linked paper actually says that they are not able to reconstruct passwords: "reconstructing passwords, passphrases, and pseudorandom strings presents a very different and more difficult problem that will require new detection and reconstruction techniques".


to post comments

Password entry without keystroke timing

Posted Mar 13, 2026 17:16 UTC (Fri) by daroc (editor, #160859) [Link]

... shoot. I focused on the evaluation criteria and missed that detail. Well, that's a bit heartening, although it probably only applies to non-"correct horse battery staple" kinds of passwords. I'll edit in a correction.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds