3 ms·
If this "I saw" has any further public details, I'd absolutely love to learn more, and I'm pretty sure others would as well. In particular, I'm especially inte
by exikyut 8y ago
If this "I saw" has any further public details, I'd absolutely love to learn more, and I'm pretty sure others would as well.
In particular, I'm especially interested in electrical or real-world attacks - such as capacitor whine! - that can be applied a weakened security situations like asymmetric logic/branching. I vaguely recall CPU voltage fuzzing is a thing, I want to go learn more about that at some point.
I'm only familiar with eg ultrasonic accoustic airgap attacks (like MOSQUITO, eg https://securityaffairs.co/wordpress/70192/hacking/mosquito-attack-airgapped-networks.html https://securityaffairs.co/wordpress/70192/hacking/mosquito-...).
- blattimwind 8y agohttp://www.cs.tau.ac.il/~tromer/acoustic/ http://www.cs.tau.ac.il/~tromer/acoustic/
- JoachimSchipper 8y agoFor the specific case of acoustic signals, see https://www.tau.ac.il/~tromer/acoustic/ https://www.tau.ac.il/~tromer/acoustic/. For "CPU voltage fuzzing", Google "glitch attack" (e.g. https://wiki.newae.com/Tutorial_A2_Introduction_to_Glitch_Attacks_(including_Glitch_Explorer) https://wiki.newae.com/Tutorial_A2_Introduction_to_Glitch_At... ) or, more generally, "fault attacks". The relevant academic community can be found around https://ches.iacr.org/2018/program.shtml https://ches.iacr.org/2018/program.shtml. (I work for a company building high-assurance crypto appliances for the Dutch government, so I have a professional interest.)
- tom-c 8y agoI couldn't find the specific lecture/demo that I went to, but I found a video by the same guy with a similar presentation elsewhere. Coincidentally he's also one of the researchers who published the original paper on Meltdown https://youtu.be/DU-HruI7Q30 https://youtu.be/DU-HruI7Q30