3 ms·
Very cool! Has anyone published any work on using sidechannel information to extract keys from U2F tokens?
by cwkoss 10y ago
Very cool! Has anyone published any work on using sidechannel information to extract keys from U2F tokens?
- conorpp 10y agoYes. There is [1] which is on Yubikey OTP specifically. And on a lot more that focus on general embedded platforms running common cryptographic algorithms. U2F uses elliptic curve cryptography (ECC) internally -- check out this source for DPA on ECC [2]. [1] http://link.springer.com/chapter/10.1007/978-3-642-41284-4_11 http://link.springer.com/chapter/10.1007/978-3-642-41284-4_1... [2] http://saluc.engr.uconn.edu/refs/sidechannel/ http://saluc.engr.uconn.edu/refs/sidechannel/