Re:Tempest attacks against AES: Stealing keys using minimal ...
by xcz on Friday June 23, 2017 @07:37AM
(#14618423)
Can someone ELI5 how this works? Would be much appreciated <3
[ Parent
| on HN ]
Re:Tempest attacks against AES: Stealing keys using minimal ...
by forg0t_username on Friday June 23, 2017 @09:37AM
(#14619039)
Basically, the current in a circuit is dependent of the data manipulated: changing a value from 0 to 1 or 1 to zero generates a current to (dis)charge the gate capacitances.
Maxwell's equations state that a current generates an electromagnetic field, and this field is perceived by the antenna. The attacker is then seeing electromagnetic waves related to the data manipulated.
By carefully comparing the waves with waves where the key is known, the attacker can then guess the key bit by bit.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by rkangel on Friday June 23, 2017 @11:47AM
(#14619999)
This is an excellent summary.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by u123u4 on Friday June 23, 2017 @07:52AM
(#14618477)
Could this be used to break my existing hard drive encryption, or does it only apply to the key generation stage?
Re:Tempest attacks against AES: Stealing keys using minimal ...
by JoachimSchipper on Friday June 23, 2017 @09:47AM
(#14619096)
In theory, yes. In practice, just grabbing your unlocked laptop and running off is a lot simpler than our/my colleagues' attack. ;-)
Re:Tempest attacks against AES: Stealing keys using minimal ...
by marcosdumay on Friday June 23, 2017 @01:05PM
(#14620754)
A "mind if I share that table" attack might be much more useful than explicitly taking some laptop and running away with it. It completely depends on your threat model.
Re:Tempest attacks against AES: Stealing keys using minimal ...
by celticninja on Friday June 23, 2017 @08:37AM
(#14618686)
it can read when the keys are used, i believe, but the attacker would need to know when the keys were used to identify the right time. However at 30cm this is someone standing at your desk waiting for you to fire up an instance or something.