Top all-time · #21595
Giuseppe Cocomazzi
Personal blog · sbudella.altervista.org/blogsecurityprogramming
Giuseppe Cocomazzi's personal blog at sbudella.altervista.org covers security and programming. Since 2019, 3 different Hacker News readers have linked it 11 times, most often “Timing Side Channel in HashiCorp Vault Shamir's Secret Sharing”. It is still writing: the last post was on 2026-10-14, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN commenters link this post as an example of a timing attack on Shamir secret sharing, used to show how overconfident developers can write flawed encryption code. One commenter notes the attack is hard to pull off in practice.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Timing Side Channel in HashiCorp Vault Shamir's Secret Sharing2 people · 2 mentions · first linked 2023-03-30
What Hacker News says?
Case in point: http://sbudella.altervista.org/blog/20230330-shamir-timing.h... I think that specific attack is pretty hard to pull off pratice (in normal scenarios, Vault secret unseals do not happen very often). But it can be a big problem if you were using a scheme where Shamir Secret sharing is used frequently (e.g. it can be triggered by a request sent by the attacker) and (I believe) with different parts of the…
Comment linking /blog/20230330-shamir-timing.html
on “Hell is overconfident developers writing encryption code”Submitted Finding Duplicate RSA Moduli in the Wild as a story · 29 points
HN discussionSubmitted Proof of Nothing as a story · 4 points
HN discussionSubmitted Hash What You Mean as a story · 3 points
HN discussionSubmitted Timing Attack Side Channel in IAIK JCE DSA Implementation as a story · 3 points
HN discussionSubmitted The Penguin Still Shows Through as a story · 2 points
HN discussionSubmitted Timing Side Channel in HashiCorp Vault Shamir's Secret Sharing as a story · 1 points
HN discussionSubmitted The CoreDNS Cache Poisoning Conjecture as a story · 1 points
HN discussionSubmitted Mindreading Your Ps and Qs as a story · 1 points
HN discussionSubmitted Hacking Safenet MobilePass OTP Token as a story · 1 points
HN discussionSubmitted SQL Injection Suminagashi as a story · 1 points
HN discussion