TODO: shell timing-attack countermeasure

diff --git a/doc/TODO.md b/doc/TODO.md
index f86a412ae8611a3426f1022c8d51e0fdcca4b0f3..3e29861fec63ac38521133e70e4104da15177d5a 100644 (file)
--- a/doc/TODO.md
+++ b/doc/TODO.md
@@ -18,3 +18,9 @@ TODO
   * Automatically set git-hooks integration.
   * Implement global hooks.
   * Check remote configuration.
+
+* Enhance shell:
+  * Add a counter-measure to prevent this attack:
+    http://users.ece.cmu.edu/~dawnsong/papers/ssh-timing.pdf
+    http://www.slideshare.net/idsecconf/countermeasure-against-timing-attack-on-ssh-using-random-delay
+    http://www.scribd.com/doc/59628153/Timing-Analysis-of-Keystrokes-and-Timing-Attacks-on-SSH-Revisited