3 ms·
Interesting, and seems like a natural followup to this side channel: http://www.cs.tau.ac.il/~tromer/papers/acoustic-20131218.pdf http://www.cs.tau.ac.il/~trome
by bobbylarrybobby 4y ago
Interesting, and seems like a natural followup to this side channel: http://www.cs.tau.ac.il/~tromer/papers/acoustic-20131218.pdf http://www.cs.tau.ac.il/~tromer/papers/acoustic-20131218.pdf (RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis), in which researchers deduced that the high-pitched sounds made by CPUs could leak the operations that GPG was performing to decrypt some encrypted content, and thus leak the private key. All you need is a microphone and the ability to trick the victim into decrypting some known content.
- rocqua 4y agoThe cool thing is that you can do this attack with code execution rather than physical access. That means a totally separate threat model.
- samus 4y agoThis is mostly a concern in airports, internet cafes and other places where attackers have easy access. Less so a data center.
- hindsightbias 4y agoSurprising it took that long to look at sound when exploits on hw LEDs was a thing decades back.