News for hackers. Stuff that matters.

A comment on Tempest attacks against AES: Stealing keys using minimal equipment [pdf].

Re:Tempest attacks against AES: Stealing keys using minimal ... by sqldba on Friday June 23, 2017 @07:41AM (#14618441)
I read it a few times and still don't understand how you can get like the 4k of private key data or whatever it is out of a radio signal - and they don't even mention keys they're talking about the algorithm itself.

Totally don't get it in the slightest.

[ Parent | on HN ]
Re:Tempest attacks against AES: Stealing keys using minimal ... by buu700 on Friday June 23, 2017 @08:47AM (#14618729)
https://en.wikipedia.org/wiki/Timing_attack. (Also, AES-256 keys are only 32 bytes, not 4 KB.)
[ Parent | on HN ]
Re:Tempest attacks against AES: Stealing keys using minimal ... by JoachimSchipper on Friday June 23, 2017 @09:53AM (#14619138)
That gives the correct flavour, but note that we use a different side-channel than timing - this is really a hardware attack, so we e.g. pick up 0->1 transitions in the address bus.
[ Parent | on HN ]
Re:Tempest attacks against AES: Stealing keys using minimal ... by buu700 on Friday June 23, 2017 @10:10AM (#14619248)
Ah, thanks for clarifying that; I'd just assumed it was timing from a quick skim.
[ Parent | on HN ]