4 ms·
For the LED side channel threat model, how expensive would it be to mitigate? Is it simply a matter of putting a few (more?) capacitors in the circuit? A roll
by jagger27 3y ago
For the LED side channel threat model, how expensive would it be to mitigate? Is it simply a matter of putting a few (more?) capacitors in the circuit?
A roll of electrical tape also seems like a reasonable mitigation in the field for the truly paranoid.
- adastra22 3y agoSwitch to a constant time crypto algorithm / implementation, like ed25519 instead of RSA.
- benlivengood 3y agoI'm not sure if ed25519 is constant-power on every architecture and implementation. https://eprint.iacr.org/2017/985.pdf https://eprint.iacr.org/2017/985.pdf is an example of power analysis relying on ed25519's deterministic behavior.
- junon 3y agoIf you're modding, replacing it with a 1k-10k resistor should work just fine. Realistically speaking, simply gouging the LED out with a knife should also work. Those sorts of circuits rarely need a real circuit for LEDs coming out of a constant current controller.
- eternityforest 3y agoThe cost should be zero. Just turn the LED off during crypto operations. No extra part needed, just connect the led to the MCU instead of actually connecting to power. Of course, there could still be some LED attack not connected to actually doing crypto operations, but this should mitigate the known attack.