3 ms·
A side channel attack revealing AES key from just 90,000 traces. Sigh, side channel attacks seem to be everywhere now.
by vardump 1y ago
A side channel attack revealing AES key from just 90,000 traces.
Sigh, side channel attacks seem to be everywhere now.
- sitzkrieg 1y agopeople are finally aware everything leaks, it's just a matter of how closely you look
- boulevard 1y agoEverything leaks if you stare at it long enough
- formerly_proven 1y agoThere's a lot of signal left between you and the noise floor!
- namibj 1y agoWorse: noise floor is a matter of definition.
- czbond 1y agoEverything has data exhaust.... the exhaust type just differs.
- barbegal 1y agoThat 90,000 traces did take 225 hours to capture so it is truly a huge amount of data and not a trivial attack.
- karlgkk 1y agoOn the other hand, I’d argue that it’s close enough to trivial to be considered trivial. How many embedded devices transmit sensitive information? Now, I know that pretty much every Bluetooth based credit card reading device explicitly defends against a channel such as this, but there are tons of access control solutions, and medical devices that don’t Would you notice a raspberry pi tucked into the mess of wires beneath the security guard guards desk?
- throwaway89201 1y ago> How many embedded devices transmit sensitive information? Every Zigbee device uses AES keys to secure the network, although the security of the protocol is pretty weak in most deployments, especially when new devices join the network. Leaking the network key would provide access to the entire network. The ARM Cortex-M4 is often used, which the side-channel attack in the article is about.
- kragen 1y agoThat's less than two weeks.
- userbinator 1y agoFor one key, assuming it does not change within that time.
- ghostpepper 11mo agoand assuming the protocol needs to continuously transmit for weeks at a time