Slashdot Mirror
Stealing Smartphone Crypto Keys Using Radio Waves
coondoggie writes "Encryption keys on smartphones can be stolen via a technique using radio waves, says one of the world's foremost crypto experts, Paul Kocher, whose firm Cryptography Research will demonstrate the hacking stunt with several types of smartphones at the upcoming RSA Conference in San Francisco next month."
Breaking crypto with all these newer and newer tricks. So long as it's within the realm of possibility that my TPM can be broken, fear of DRM hath no hold on me.
So don't do it !!
Great. Now I need a tin foil case for my phone too.
The radio-based device will pick up electromagnetic waves occurring when the crypto libraries inside the smartphone are used,
, but I can't see how it could actually be detecting anything inside the smartphone as the waves emitted by the little electrons zipping around are hardly going to be detected, not to mention identifying those particular disturbances amongst everything else would be impossible. Is it actually detecting the stuff as the cellphone transmits/receives if then? I'm far from an expert in this, so any explanation would be great.
Laughter is the best medicine, except if you have a broken rib.
Looks like they need some TEMPEST shielding.
Its probably inferred from clock sources within the chip. Its pretty easy with the right equipment.
This is not a new attack. It's been known for decades - this is the attack the NSA codenamed HIJACK, I believe (or it may possibly be NONSTOP, I always get the two confused). I know GCHQ's CESG were aware of it too.
Putting a radio transmitter next to something which may produce key-dependent interference (depending on, say, whether it's squaring (1) or multiplying (0) each bit of an RSA key) will yield a measurable interference pattern which leaks information about the keys.
Countermeasures are surprisingly similar to acoustic emissions attacks and timing attacks: blinding; routines/hardware circuits which don't exhibit key-dependent behaviour; better shielding, particularly of the ground and Vcc planes for the TX circuit.
Works for keyboards, too.
Your TPM's private key may be potentially breakable, but this doesn't mean it will be broken. *Your* private key, however, *will* be broken.
further reading http://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf
So the CPU doesn't have a strong enough EM signal (note that all electronic processing generates EM waves) to send out the key processing details over any reasonable distance (tiny starting signal plus 1/r^2) . But it is a smartphone, and the CPU EM signal is strong enough to interfere with the (very!) nearby phone transmitter. And by examining that signal, you can tempest monitor the CPU from a much greater distance. Cool. The smartphone in effect has its own built in CPU EM signal amplifier.
The hard bit is the details. You need the right equipment, and the right algorithms to extract the signal and then reconstruct the key.
This is a well known side channel attack; it is usually pretty hard to pull off for all the reasons you said, but apparently these researchers have overcome those obstacles. Usually these sorts of attacks are chosen plaintext or chosen ciphertext attacks, and you will look for particular changes in the EMI that comes out of the phone which can be correlated with the secret key. You will probably need to choose many plaintexts/ciphertexts for this attack to work, but a typical TLS session will probably be enough.
Palm trees and 8
If you've ever designed a circuit board where you had to worry about isolation of interference between sections and using groundplanes and filtering correctly, you'd know the trivial answer as to what is going on here and why your post is totally wrong: interference from the processor will cause some small modulation in the phone's radio circuits. Despite any shielding, there are multiple channels through which such interference is coupled inside a cellphone.
"Politicians and diapers must be changed often, and for the same reason."
My phone has a dual core 1.2ghz cpu. Your telling me that its possible to decode the signals flowing through the phones circuits remotely ? whats the energy level of the RF radiating from the phone, NOT including the WIFI / bluetooth / LTE cdma / spurious LCD emissions ? assuming you did shut these off, you would need to stick the thing in a RF shielded room with a yagi up the phones behind to get enough signal strength to decode electrical impulses operating at 1.2GHZ!
Tiny
Electro
Magnetic
Particles
Emitting
Secret
Things
Actually TEMPEST.