[linuxworks]

synopsis: Researchers find way to zap RSA security scheme

University of Michigan security researchers outline voltage-based attack on the RSA authentication scheme

Three University of Michigan computer scientists say they have found a way to exploit a weakness in RSA security technology used to protect everything from media players to smartphones and e-commerce servers.

Researchers find way to zap RSA security scheme

how strange!




...of course, they could have halved their solve-it time if they used *balanced* cabling.

 

[DanielCox]

I wouldn't worry too much, this is a hardware based attack and these already exist. There are easier and faster ways of getting access to a key.

 

[linuxworks]

I'm only partially thru the .pdf (and only understanding a tiny percent of it) but it seems to be a 'side attack' and hardware fault based. if you cause some parallel channels to run faster or slower than others, the chip assumes the piplines will 'connect' at the same point in time but if they're interfered with (voltage part) then you can upset this and cause hardware faults. this seems to be how they 'got in'; by causing faults and getting the 'bad' computations back and chewing on them. in a nutshell (afaict)

still, pretty interesting how they did this and did not need internal access to the box!

 

[Drag0n]

By the title of the thread, i thought someone figured out the secret under the nail varnish on RSA's chips in his amps...lol !!!

RSA= Ray Samuels Audio


I thought i was going to see a list of amp models with chip numbers, and i was waiting for the thread to be quickly deleted....LOL!!!

 

[linuxworks]

hahaha

I didn't think rsa = the vendor name; I was thinking only of the security algorithm.

nail polish, lol! a joke uuencoded inside a joke

 

[marvin]

Quote:

Originally Posted by linuxworks /img/forum/go_quote.gif I'm only partially thru the .pdf (and only understanding a tiny percent of it) but it seems to be a 'side attack' and hardware fault based. if you cause some parallel channels to run faster or slower than others, the chip assumes the piplines will 'connect' at the same point in time but if they're interfered with (voltage part) then you can upset this and cause hardware faults. this seems to be how they 'got in'; by causing faults and getting the 'bad' computations back and chewing on them. in a nutshell (afaict) still, pretty interesting how they did this and did not need internal access to the box!

Seems like a fairly standard side channel attack (attacking implementation instead of attacking algorithm) of the sort caused by software guys that don't know much about hardware and systems guys who have bigger fish to fry than security.