Acoustic Cryptanalysis

详细信息    查看全文

• 作者：Daniel Genkin ; Adi Shamir ; Eran Tromer
• 关键词：Side channel attacks ; Acoustic emanations ; RSA ; Cryptanalysis
• 刊名：Journal of Cryptology
• 出版年：2017
• 出版时间：April 2017
• 年：2017
• 卷：30
• 期：2
• 页码：392-443
• 全文大小：
• 刊物类别：Computer Science
• 刊物主题：Coding and Information Theory; Computational Mathematics and Numerical Analysis; Combinatorics; Probability Theory and Stochastic Processes; Communications Engineering, Networks;
• 出版者：Springer US
• ISSN：1432-1378
• 卷排序：30

文摘

Many computers emit a high-pitched noise during operation, due to vibration in some of their electronic components. These acoustic emanations are more than a nuisance: They can convey information about the software running on the computer and, in particular, leak sensitive information about security-related computations. In a preliminary presentation (Eurocrypt’04 rump session), we have shown that different RSA keys induce different sound patterns, but it was not clear how to extract individual key bits. The main problem was the very low bandwidth of the acoustic side channel (under 20  kHz using common microphones, and a few hundred kHz using ultrasound microphones), and several orders of magnitude below the GHz-scale clock rates of the attacked computers. In this paper, we describe a new acoustic cryptanalysis key extraction attack, applicable to GnuPG’s implementation of RSA. The attack can extract full 4096-bit RSA decryption keys from laptop computers (of various models), within an hour, using the sound generated by the computer during the decryption of some chosen ciphertexts. We experimentally demonstrate such attacks, using a plain mobile phone placed next to the computer, or a more sensitive microphone placed 10 meters away.