Re:Wireless Charging Power Side-Channel Attacks
by cixter on Monday September 13, 2021 @01:37PM
(#28514284)
This sounds really interesting! Do you have any links where I can read more about this power starvation attack?
Re:Wireless Charging Power Side-Channel Attacks
by bayindirh on Monday September 13, 2021 @02:43PM
(#28515103)
I remembered it correctly: It's the RSA part of OpenSSL which was cracked (or leaked to be exact), 11 years ago (wow, time flies).
Summary is here [0], and paper is here [1].
[0]: https://www.theregister.com/2010/03/04/severe_openssl_vulner...
[1]: http://web.eecs.umich.edu/~valeria/research/publications/DAT...
Re:Wireless Charging Power Side-Channel Attacks
by xattt on Monday September 13, 2021 @06:57AM
(#28509899)
Does anyone actually use their phone while attached to a wireless charger? It seems incredibly awkward.
Re:Wireless Charging Power Side-Channel Attacks
by bayindirh on Monday September 13, 2021 @07:07AM
(#28509979)
I actually use mine. Generally stream music to something. However, you don't need to use it.
iOS does a lot of thing during charging. Face recognition, backups, mail checks, software updates, another applications' background stuff.
It might as well interact with your home or car over BT (cars have wireless charging these days). There's a myriad of opportunities there.
Re:Wireless Charging Power Side-Channel Attacks
by throw0101a on Monday September 13, 2021 @07:10AM
(#28509989)
There are wireless charging phone mounts:
* https://www.rammount.com/shop-all/phone-mounts/wireless-char...
If they can predict which site you're on, they can also possibly detect an unsecured secure algorithm's state.
SSL or PGP had a similar "power starvation" attack: reducing the power to the power supply and watching power drainage allowed one to predict private keys.
The attack has been patched, then.