Re:Ask HN: Is it possible to decrypt 256-bit encrypted radio...
by bell-cot on Friday May 19, 2023 @12:39PM
(#36003897)
IANAIA (...not an Intelligence Analyst), but on top of all the routine crypto failures (crummy "256-bit" crypto algorithm, or flawed implementation, or weak keys, or stolen keys, or ...), I can quickly think of:
- EM Side channels - if an ultra-sensitive antenna & receiver aimed at the Motorola radio can pick up any leaked signals from its internal electronics, then... This might only work on a small percentage of the units - due to a flawed production run at Motorola, or too-permissive QC standards, or poorly maintained kit, etc.
- Audio Intercepts - whether fancy parabolic mics, bugs hidden near Ukrainian forward observers, or the old "bounce the laser off the windowpane" trick.
- Concentrated Effort - the supercomputer and/or custom hardware needed to actually break the crypto may be far beyond what is viable for sustained, widespread use. But for either a PR boost, or if the Russians can convince the Ukrainians to cease use of their "easily broken" crypto...
- Cover Story - the Russians are obtaining the data without actually breaking the crypto...but certainly ain't stupid enough to talk about their actual methods.
- EM Side channels - if an ultra-sensitive antenna & receiver aimed at the Motorola radio can pick up any leaked signals from its internal electronics, then... This might only work on a small percentage of the units - due to a flawed production run at Motorola, or too-permissive QC standards, or poorly maintained kit, etc.
- Audio Intercepts - whether fancy parabolic mics, bugs hidden near Ukrainian forward observers, or the old "bounce the laser off the windowpane" trick.
- Concentrated Effort - the supercomputer and/or custom hardware needed to actually break the crypto may be far beyond what is viable for sustained, widespread use. But for either a PR boost, or if the Russians can convince the Ukrainians to cease use of their "easily broken" crypto...
- Cover Story - the Russians are obtaining the data without actually breaking the crypto...but certainly ain't stupid enough to talk about their actual methods.