On 9/10/2008 at 2:58 PM Kevin Neff wrote:
|Hi,

|

|Some secure protocols like SSH send encrypted keystrokes

|as they're typed.  By doing timing analysis you can figure

|out which keys the user probably typed (keys that are

|physically close together on a keyboard can be typed

|faster).  A careful analysis can reveal the length of

|passwords and probably some of password itself.

 =============
>> (keys that are physically close together on a keyboard

quoted text
>> can be typed faster).

I do not agree with that statement.   Using two fingers I can hit the "A" and

"L" keys nearly simultaneously (probably could even hit them simultaneously if

I tried enough).
The statement seems to rely upon the typist being a one-finger typer.