Re:Tempest attacks against AES: Stealing keys using minimal ...
by devdoomari on Friday June 23, 2017 @06:05AM
(#14618073)
...how about a random-power-consumer? would it help?
[ Parent
| on HN ]
Re:Tempest attacks against AES: Stealing keys using minimal ...
by dom0 on Friday June 23, 2017 @06:16AM
(#14618108)
No, not at all. A raised SNR can be overcome in almost all circumstances by making more measurements, i.e. correlation, since noise is not correlated, it is removed. For the same reason random delays don't help against timing attacks.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by Drdrdrq on Friday June 23, 2017 @02:26PM
(#14621454)
Curious: how about generating noise which is correlated to signal and actively tries to modify output to some "random" noise?
Re:Tempest attacks against AES: Stealing keys using minimal ...
by Cyph0n on Friday June 23, 2017 @01:25PM
(#14620939)
That's how DPA works as far as I understand.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by Ferofluid on Friday June 23, 2017 @07:36AM
(#14618413)
Not if you calculate keys nonstop, then have another machine pick from a huge list later.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by tinus_hn on Friday June 23, 2017 @07:13AM
(#14618316)
Perhaps you could quantize the level.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by Klathmon on Friday June 23, 2017 @06:12AM
(#14618093)
Generally mitigations like adding random things only delay attacks like this, they don't prevent them.
Like adding random timings won't prevent timing attacks, adding random sized strings won't prevent chosen plaintext or padding attacks, etc...
Re:Tempest attacks against AES: Stealing keys using minimal ...
by Gibbon1 on Friday June 23, 2017 @07:09AM
(#14618295)
Wonder if you can hash the cryto algorithm.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by Dinux on Friday June 23, 2017 @07:15AM
(#14618325)
This was even tested with CTR and GCM (I know this for a fact), which were not a problem at all. Surprisingly GCM was somewhat easier than hashing modes. But also CBC was detectable after a few blocks.