Re: [paper] RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis

Andy Smith <[email protected]> Fri, 20 Dec 2013 11:09:39 +0000
Newsgroups gmane.linux.elitists
Message-ID <[email protected]>
On Thu, Dec 19, 2013 at 11:44:38PM -0800, Timothy Tuck wrote:
> On 19.12.2013 14:58, Bill Bogstad wrote:
> >all it means is that one shouldn't let anyone be within acoustic
> >range of their computer when it is decrypting the message.  That
> >isn't much harder to accomplish than not letting anyone read my
> >email over my shoulder.
> 
> Wow, is that some special kind of crack that your on?
> Not much harder to accomplish than not letting anyone read over your
> shoulder eh?

But if we take the paper at its word it requires a known plaintext
being decrypted for one hour.

Not an hour spent listening to a laptop decrypting lots of
different, unknown plaintexts.

I recall another technique presented recently that involved using
the accelerometer of a smartphone to work out, through sensed
vibrations, which keys were being struck on a nearby keyboard. That
sounds a lot more feasible at present, since there are a fairly
limited number of keys on a keyboard and a desktop user may always
have it in one place.

http://gcn.com/articles/2011/10/18/smart-phone-sensors-steal-keystrokes.aspx

Cheers,
Andy

_______________________________________________
Do not Cc: anyone else on mail sent to this list.  The list server is set for maximum one recipient.
linux-elitists mailing list
[email protected]
http://zgp.org/cgi-bin/mailman/listinfo/linux-elitists
signature.asc (application/pgp-signature, 198 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEAREDAAYFAlK0JXMACgkQIJm2TL8VSQtuugCdEWIlCgyZxw7m0WN2HY3CQSzf
VEkAoIIL0GrQlT+MU2mqt/+vepVXnWPA
=4ufu
-----END PGP SIGNATURE-----