3 ms·
The first sentence mentions this as a side channel attack, which is a legitimate attack method and applies to most algorithms, not just AES. Most crypto packag
by mey 16y ago
The first sentence mentions this as a side channel attack, which is a legitimate attack method and applies to most algorithms, not just AES. Most crypto packages guard against this attack one way or another. This is one of the reasons you do not implement your own cryptography solution without understanding all the details, as any weakness can cause a complete compromise.
Further reading.
http://en.wikipedia.org/wiki/Side_channel_attack http://en.wikipedia.org/wiki/Side_channel_attack
Also this article title is slightly mis-leading, but not entirely.
- eru 16y agoSide channel attacks can become pretty funny, e.g. listening to the sounds your computer makes.
- mtigas 16y agoIn case anyone is wondering (via Wikipedia): In 2004, Adi Shamir and Eran Tromer demonstrated that it may be possible to conduct timing attacks against a CPU performing cryptographic operations by analysis of variations in its humming noise (that is, its high-frequency humming noise, not the louder low-frequency humming of its cooling fan). http://people.csail.mit.edu/tromer/acoustic/ http://people.csail.mit.edu/tromer/acoustic/
- JoachimSchipper 16y agoSome people take long-exposure photographs in a dark box. Yes, really. Of course, electron microscopes and precisely-aimed laser pulses are more... geeky.