add white box crypto into benchmark
monperrus opened this issue · comments
In his master's thesis, Alexander Koski @aeakoski has looked at white-box crypto, which is a sweet spot for randomization.
There is a reference repo containing white-box crypto implementations, together with the attack: https://github.com/SideChannelMarvels/Deadpool
How many of them would fit in our pipeline?
I think that we can start with the C/C++ codes. We can use emcc to generate the binaries and the exploit surfaces in the browser (maybe NodeJS too) like we did previously
Closing this issue, since the results over white-box crypto libraries attacks (Deadpool) are not relevant
For the record, we can now run CROW on crypto library libsodium.