Re: [paper] RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis
Andy Smith <[email protected]> Fri, 20 Dec 2013 11:09:39 +0000
| Newsgroups | gmane.linux.elitists |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Dec 19, 2013 at 11:44:38PM -0800, Timothy Tuck wrote: > On 19.12.2013 14:58, Bill Bogstad wrote: > >all it means is that one shouldn't let anyone be within acoustic > >range of their computer when it is decrypting the message. That > >isn't much harder to accomplish than not letting anyone read my > >email over my shoulder. > > Wow, is that some special kind of crack that your on? > Not much harder to accomplish than not letting anyone read over your > shoulder eh? But if we take the paper at its word it requires a known plaintext being decrypted for one hour. Not an hour spent listening to a laptop decrypting lots of different, unknown plaintexts. I recall another technique presented recently that involved using the accelerometer of a smartphone to work out, through sensed vibrations, which keys were being struck on a nearby keyboard. That sounds a lot more feasible at present, since there are a fairly limited number of keys on a keyboard and a desktop user may always have it in one place. http://gcn.com/articles/2011/10/18/smart-phone-sensors-steal-keystrokes.aspx Cheers, Andy _______________________________________________ Do not Cc: anyone else on mail sent to this list. The list server is set for maximum one recipient. linux-elitists mailing list [email protected] http://zgp.org/cgi-bin/mailman/listinfo/linux-elitists
signature.asc
(application/pgp-signature, 198 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEAREDAAYFAlK0JXMACgkQIJm2TL8VSQtuugCdEWIlCgyZxw7m0WN2HY3CQSzf VEkAoIIL0GrQlT+MU2mqt/+vepVXnWPA =4ufu -----END PGP SIGNATURE-----