Daniel J. Bernstein@hashbreaker
Disclosure
@FlorianHeigl1 @veorq @harryhalpin We're still seeing AES cache-timing vulnerabilities such as https://www.cve.org/CVERecord?id=CVE-2025-52496. NIST has never withdrawn its claim "Table lookup: not vulnerable to timing attacks" from the selection of Rijndael as AES. But they do seem to be grudgingly admitting AES block size is too small.
Post summary
The tweet reports that AES cache‑timing flaws (CVE‑2025‑52496) remain active and notes NIST’s ongoing claim that Rijndael is not vulnerable to timing attacks, highlighting the persistence of the vulnerability and the need for vigilance.
0002150
24.0K followersView on X