He can steal your smart phone’s and tablet’s encryption keys

If you think that the encryption keys that your smart phone or tablet computer uses to protect data you want to keep others from accessing is secure, well … think again.

Crypto researchers have demonstrated that those encryption keys can be stolen using techniques that are not that difficult to assemble. Because I am very security conscious and like to pay close attention to matters of this nature, I felt I should bring it to your attention too. The article was originally published by Tom Simonite for Technology Review. The article goes like this:

At the RSA computer security conference last week, Gary Kenworthy of Cryptography Research held up an iPod Touch on stage and looked over to a TV antenna three meters away. The signal picked up by the antenna, routed through an amplifier and computer software, revealed the secret key being used by an app running on the device to encrypt data. An attacker with access to this key could use it to perfectly impersonate the device he stole it from—to access e-mail on a company server, for example.

The antenna was detecting radio signals “leaking” from the transistors on the chip inside the phone performing the encryption calculations. Transistors leak those signals when they are active, so the pattern of signals from a chip provides an eavesdropper a representation of the work the chip is doing. When Kenworthy tuned his equipment to look in the right place, a clear, regular pattern of peaks and troughs appeared on his computer screen. They could be seen to come in two varieties, large and small, directly corresponding to the string of digital 1s and 0s that make up the encryption key.

The signal from an HTC Evo 4G smart phone was a direct transcript of the device’s key, used as part of a common cryptographic algorithm called RSA. The researchers required a more complex statistical analysis to successfully capture a key from another HTC device, which was used as part of an encryption scheme known as AES.

Read the complete article here.

Related Posts

Android Vulnerability: Use Precaution on Public WiFi Yesterday, researchers from Germany’s University of Ulm reported that some Android applications transmit sensitive authentication data without properl...
Why Ubuntu Business Desktop Remix will be a tough sell Ubuntu Business Desktop Remix is an edition of Ubuntu Desktop tweaked for use by institutional or business users. It was announced by Mark Shuttlewort...
A general public license for seeds? “The same multinational corporations that are putting their proprietary, genetically modified plants into the environment and onto our tables are also...
The top 10 best Android games of 2010 The history books will doubtless look back on 2010 as the year the whole Google mobile platform idea really took off. As the year closes out, the qual...
Benefits of the MeeGo Software Platform The MeeGo open source project is unique in that it offers benefits to everyone in the ecosystem starting from the developer all the way up to the oper...
FTC’s New Privacy Report Endorses “Do Not Track” Mechanism to Empower On... This morning, the Federal Trade Commission released its long-anticipated privacy report. The report is the final result of a series of FTC privacy ro...

We Recommend These Vendors and Free Offers

ContainerizeThis 2016 is a free, 2-day conference for all things containers and big data. Featured, will be presentations and free, hands-on workshops. Learn more at ContainerizeThis.com

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).

Deploy an SSD Cloud server in 55 seconds on DigitalOcean. Built for developers and starting at $5:00/month (20 GB SSD, 512 MB of RAM).

Want to become an expert ethical hacker and penetration tester? Request your free video training course of Online Penetration Testing and Ethical Hacking

Whether you're new to Linux or are a Linux guru, you can learn a lot more about the Linux kernel by requesting your free ebook of Linux Kernel In A Nutshell.


3 Comments

  1. Pingback: رادیو گیک شماره ۲ – از فضا و فراسوی فضا « دگرگون

  2. Pingback: رادیو گیک شماره ۲ – از فضا و فراسوی فضا

  3. Pingback: Links 7/3/2012: NVIDIA Joins Linux Foundation, Android Easily Beats iOS in the US | Techrights

Leave a Comment

Your email address will not be published. Required fields are marked *

*