Re:ECDSA smartphone key extraction using $2 magnetic probe
by TickleSteve on Friday March 25, 2016 @07:39AM
(#11359504)
Is this how the FBI are going to get into the iPhone maybe??
[ Parent
| on HN ]
Re:ECDSA smartphone key extraction using $2 magnetic probe
by nly on Friday March 25, 2016 @07:48AM
(#11359532)
Not specifically. ECDSA is a signing algorithm. Unless there's some really fancy asymmetric authentication protocol between components within the phone, which perform curve operations, it's most unlikely. Of course, there's no saying a hardware side-channel isn't a possible attack vector.
Re:ECDSA smartphone key extraction using $2 magnetic probe
by TickleSteve on Friday March 25, 2016 @08:50AM
(#11359718)
There is a dedicated authentication coprocessor, to which the communications will be authenticated, so yes.
Re:ECDSA smartphone key extraction using $2 magnetic probe
by ctz on Friday March 25, 2016 @10:39AM
(#11360285)
The thing you're talking about ("secure enclave") is not present in the phone the FBI are trying to attack.
Also, the Secure Enclave co-processor is on-die, so there will be no need to authenticate or encrypt communications with it.
Re:ECDSA smartphone key extraction using $2 magnetic probe
by sugarfactory on Friday March 25, 2016 @10:06AM
(#11360125)
I suppose not. I presume the way would be vulnerabilities in code handling untrusted data streams such as USB, Wi-Fi, or BlueTooth. Although the amount of time it takes might be getting longer, every major iOS update eventually has had jailbreaks, which implies for an organization with larger budget than jailbreak hackers would likely be able to discover 0-day vulnerabilities in iOS.