Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The interesting thing about Crypto performance tuning is that you really have to ensure that no logical path does a different amount/kind of work than another(i.e. no short circuiting). I used to not think much of it until I saw an RSA private key recovered via acoustic analysis of capacitor whine due to a short circuit condition in a function to multiply two large numbers.(this was using a recent release of openssl) To my knowledge no other area of programming really has this pitfall


If this "I saw" has any further public details, I'd absolutely love to learn more, and I'm pretty sure others would as well.

In particular, I'm especially interested in electrical or real-world attacks - such as capacitor whine! - that can be applied a weakened security situations like asymmetric logic/branching. I vaguely recall CPU voltage fuzzing is a thing, I want to go learn more about that at some point.

I'm only familiar with eg ultrasonic accoustic airgap attacks (like MOSQUITO, eg https://securityaffairs.co/wordpress/70192/hacking/mosquito-...).


For the specific case of acoustic signals, see https://www.tau.ac.il/~tromer/acoustic/. For "CPU voltage fuzzing", Google "glitch attack" (e.g. https://wiki.newae.com/Tutorial_A2_Introduction_to_Glitch_At... ) or, more generally, "fault attacks".

The relevant academic community can be found around https://ches.iacr.org/2018/program.shtml.

(I work for a company building high-assurance crypto appliances for the Dutch government, so I have a professional interest.)


I couldn't find the specific lecture/demo that I went to, but I found a video by the same guy with a similar presentation elsewhere. Coincidentally he's also one of the researchers who published the original paper on Meltdown

https://youtu.be/DU-HruI7Q30



seems obvious, but just checking that they needed (acoustic) access to the machine performing a calculation with private key?


Yes, though generally such attacks can function from at least a few feet - sometimes 20-ish - away.

So some access, though less than you might guess.


Thank you, and i think that leads to a new trailer for the Bionic Man - "he can hear a resistor whine 20 feet away"




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: