Security

5042 readers

10 users here now

Confidentiality Integrity Availability

founded 5 years ago

MODERATORS

It is possible to extract encryption keys by recording coil whine with a phone next to the computer (2013 paper) (web.archive.org)

submitted 11 months ago* (last edited 11 months ago) by [email protected] to c/[email protected]

7 comments fedilink hide all child comments

A more TLDR article about this: https://www.extremetech.com/defense/173108-researchers-crack-the-worlds-toughest-encryption-by-listening-to-the-tiny-sounds-made-by-your-computers-cpu

FAQs from the researchers: https://web.archive.org/web/20230130225254/http://www.cs.tau.ac.il/~tromer/acoustic/

top 7 comments

sorted by: hot top controversial new old

[–] [email protected] 4 points 11 months ago

This paper is a bullshit. Authors claim they are able to extract an RSA 4096 decryption key within an hour using a prepared cyphertext, but this cannot work for PGP. PGP uses an asymmetric cypher (i.e. RSA) only to encrypt a symmetric cypher key (e.g. AES) that is used to encrypt/decrypt the text itself. So RSA does not work for hours, it takes only few milliseconds to decrypt a key that is 256 bit maximum.

Even if this method worked, it would be very hardware dependant. They would need to tune their algorithm for each laptop being attacked. So if you don't give your laptop to attacker for several weeks, he won't be able to steal your key.

[–] inspxtr 4 points 11 months ago (1 children)

Since this seems to be a 2013 paper, does any one know whether there has been any update regarding software (except for GPG) or hardware defense against this attack?

[–] [email protected] 1 points 11 months ago

The researchers say in the FAQ that they disclosed it to GnuPG and they have mitigated their implementation against their specific attack, but it leaves the question of whether it is still vulrnable to a a more advanced method of audio sidechanneling and whether other encryption implementations, say, OpenSSL, OpenSSH, or Veracrypt, are also vulrnable to similar attacks.

[–] [email protected] 3 points 11 months ago* (last edited 11 months ago) (1 children)

I don't know that much about audio sidechannels so I don't know how realistic this would be, but my immediate thought is whether this can be extended to extract not just a single key but other data as well. For example, if you had a phone next to a computer that was reading and displaying a text file that contained confidential information, or perhaps reading values from a database, could it be possible to leak the actual data this way?

I also wonder how many videos and audio recordings made near computers have encryption keys and other sensitive data hidden in them, just waiting to be decoded. Or whether a video recorded by a smartphone can reveal what the phone is doing in the background. A terrifying prospect.

[–] [email protected] 7 points 11 months ago (2 children)

It only works on chosen cyphertexts. They don't specify is that means "any file, but the attacker has to get access to it" or if it means "this very specific file that we made in order to do this attack".

The former being much more dangerous than the latter of course.

[–] [email protected] 5 points 11 months ago

According to the FAQ:

The key extraction attacks finds the secret key bits one by one, sequentially. For each bit, the attacker crafts a ciphertext of a special form, that makes the acoustic leakage depend specifically on the value of that bit. The attacker then triggers decryption of that chosen ciphertext, records the resulting sound, and analyzes it.

Which sounds to me like the latter?

[–] [email protected] 1 points 11 months ago

but, you surely will agree, this is pretty devastating for any target. known cleartext may be trivial to insert into a targets workflow, and the confirmed recovery of a private key is potentially a massive payoff.

the ability to process and extract sensitive information from the local environment has gotten seriously scary.