BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//talks.openalt.cz//openalt-2026//speaker//LCEUJB
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-openalt-2026-9WGLFU@talks.openalt.cz
DTSTART;TZID=CET:20261107T133000
DTEND;TZID=CET:20261107T135500
DESCRIPTION:Timing side-channel vulnerabilities can expose sensitive inform
 ation in cryptographic implementations\, yet detecting them on Java Card s
 mart cards remains challenging. These platforms restrict access to interna
 l timing information\, while host-side measurements often lack the precisi
 on needed to identify subtle\, data-dependent execution differences.\n\nTh
 is talk presents a practical approach that combines differential fuzzing w
 ith Simple Power Analysis (SPA) to detect and investigate timing leaks in 
 Java Card applications. Differential fuzzing automatically generates input
 s that may trigger different execution paths\, and SPA-based profiling use
 s power traces collected from a real card to precisely reconstruct executi
 on timing. Together\, these techniques provide a workflow for discovering 
 leaks and validating their behavior on actual hardware.\n\nThe framework i
 s demonstrated on open-source Java Card applications\, revealing timing di
 fferences that are difficult to detect with traditional methods. Although 
 designed for Java Card\, the approach can also be applied to other embedde
 d and cryptographic systems where timing information is limited\, but sour
 ce code and power measurements are available.
DTSTAMP:20261030T161006Z
LOCATION:A113
SUMMARY:Finding timing leaks in Java Card implementations when the clock is
  hidden - Veronika Hanulíková
URL:https://talks.openalt.cz/openalt-2026/talk/9WGLFU/
END:VEVENT
END:VCALENDAR