NDLI: Acoustic Cryptanalysis

Content Provider	Springer Nature Link
Author	Genkin, Daniel Shamir, Adi Tromer, Eran
Copyright Year	2016
Abstract	Many computers emit a high-pitched noise during operation, due to vibration in some of their electronic components. These acoustic emanations are more than a nuisance: They can convey information about the software running on the computer and, in particular, leak sensitive information about security-related computations. In a preliminary presentation (Eurocrypt’04 rump session), we have shown that different RSA keys induce different sound patterns, but it was not clear how to extract individual key bits. The main problem was the very low bandwidth of the acoustic side channel (under 20 kHz using common microphones, and a few hundred kHz using ultrasound microphones), and several orders of magnitude below the GHz-scale clock rates of the attacked computers. In this paper, we describe a new acoustic cryptanalysis key extraction attack, applicable to GnuPG’s implementation of RSA. The attack can extract full 4096-bit RSA decryption keys from laptop computers (of various models), within an hour, using the sound generated by the computer during the decryption of some chosen ciphertexts. We experimentally demonstrate such attacks, using a plain mobile phone placed next to the computer, or a more sensitive microphone placed 10 meters away.
Starting Page	392
Ending Page	443
Page Count	52
File Format	PDF
ISSN	09332790
Journal	Journal of Cryptology
Volume Number	30
Issue Number	2
e-ISSN	14321378
Language	English
Publisher	Springer US
Publisher Date	2016-02-08
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Side channel attacks Acoustic emanations RSA Cryptanalysis Coding and Information Theory Computational Mathematics and Numerical Analysis Combinatorics Probability Theory and Stochastic Processes Communications Engineering, Networks
Content Type	Text
Resource Type	Article
Subject	Applied Mathematics Computer Science Applications Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Efficient Cache Attacks on AES, and Countermeasures

Side-Channel Resistant Crypto for Less than 2,300 GE

Cryptanalysis of MD4

RSA-Based Undeniable Signatures

RSA-Based Undeniable Signatures

Practical Cryptanalysis of ISO 9796-2 and EMV Signatures

Cryptanalysis of ISO/IEC 9796-1

A Practical Attack on KeeLoq

Cryptanalysis of the Chor—Rivest Cryptosystem

Acoustic Cryptanalysis

Similar Documents

Efficient Cache Attacks on AES, and Countermeasures

Side-Channel Resistant Crypto for Less than 2,300 GE

Cryptanalysis of MD4

RSA-Based Undeniable Signatures

RSA-Based Undeniable Signatures

Practical Cryptanalysis of ISO 9796-2 and EMV Signatures

Cryptanalysis of ISO/IEC 9796-1

A Practical Attack on KeeLoq

Cryptanalysis of the Chor—Rivest Cryptosystem

Acoustic Cryptanalysis