Maniphest T1588

GnuPG side channel attack, RSA4096 cracked via acoustic cryptanalysis
Closed, ResolvedPublic
Actions

Assigned To
• werner
Authored By
cnd
Dec 20 2013, 3:30 AM
Tags
Subscribers
cnd

Description

Described here: http://www.extremetech.com/extreme/173108-researchers-crack-the-
worlds-toughest-encryption-by-listening-to-the-tiny-sounds-made-by-your-computers-
cpu

Details

External Link
http://www.tau.ac.il/~tromer/papers/acoustic-20131218.pdf
Version
Undisclosed

Event Timeline

cnd added projects: gnupg, Bug Report.Dec 20 2013, 3:30 AM
cnd set External Link to http://www.tau.ac.il/~tromer/papers/acoustic-20131218.pdf.
cnd set Version to Undisclosed.
cnd added a subscriber: cnd.
cnd added a comment.Dec 20 2013, 3:33 AM

You need to perform the bigmath modexp routines in constant time, the same as the
smartcard people do to stop key theft via power usage observation.

• werner closed this task as Resolved.Jun 2 2014, 4:29 PM
• werner claimed this task.
• werner added a project: Mistaken.

I worked with the guys and fixed versions have been released in time. The paper
and website actuallay tell this.