

We describe LBTA with a variable number of layers with concrete side channels of different granularity, ranging from 64 B to 2MB in practice and in theory beyond. LBTA uses multiple coarser-grained side channel layers as an extension to cache-line granularity templating to speed up the runtime of cache templating attacks. In this paper, we present a new generic cache template attack technique, LBTA, layered binary templating attacks. Hence, discovering and eliminating all user input side-channel leakage on a cache-line granularity within huge code bases are impractical. Other automated approaches focused on cryptographic implementations and media software but are not directly applicable to user input. However, for large binaries, the runtime is prohibitively high. Cache template attacks demonstrated automated leakage of user input in shared libraries.
