New SSH function: resist side channel attacks

Hardware vulnerabilities exposed in the past two years, such as Spectre, Meltdown, Rowhammer and Rambleed, can steal keys stored in memory through guessing and side channels. Now, the popular network transmission encryption protocol SSH has introduced the function of resisting such vulnerabilities to protect the keys stored in memory. The article originates from the fallen fish- https://www.duoluodeyu.com/2546.html

The article originates from the fallen fish- https://www.duoluodeyu.com/2546.html

The new change is mainly to encrypt the private key with a symmetric key when it is not used, and the symmetric key is derived from a prekey composed of large random numbers. The article originates from the fallen fish- https://www.duoluodeyu.com/2546.html

Before attempting to crack the protected private key, the attacker must first recover the entire prekey with high accuracy. At present, the side channel has a large bit error rate, making it impossible to recover the prekey. The article originates from the fallen fish- https://www.duoluodeyu.com/2546.html