在密码学中,计时攻击是边界信道攻击的一种,边界信道攻击是通过对系统的物理学分析和实现方式分析,而不是密码学分析或暴力破解,来尝试破解密码学系统的行为。计时攻击就是通过分析密码学算法在计算机运算时间差来进行攻击。本文将介绍计时攻击的原理以及在Rails框架中对计时攻击的防范。 In cryptography, timing attacks are a type of borderline channel attack that attempts to crack the behavior of cryptography systems by analyzing the system’s physics and analyzing how it is implemented, rather than using cryptography or brute force. Timing attack is through the analysis of cryptography algorithm in the computer operation time difference to attack. This article will introduce the principles of timing attacks and the prevention of timing attacks in the Rails framework.