He can steal your smart phone’s and tablet’s encryption keys

If you think that the encryption keys that your smart phone or tablet computer uses to protect data you want to keep others from accessing is secure, well … think again.

Crypto researchers have demonstrated that those encryption keys can be stolen using techniques that are not that difficult to assemble. Because I am very security conscious and like to pay close attention to matters of this nature, I felt I should bring it to your attention too. The article was originally published by Tom Simonite for Technology Review. The article goes like this:

At the RSA computer security conference last week, Gary Kenworthy of Cryptography Research held up an iPod Touch on stage and looked over to a TV antenna three meters away. The signal picked up by the antenna, routed through an amplifier and computer software, revealed the secret key being used by an app running on the device to encrypt data. An attacker with access to this key could use it to perfectly impersonate the device he stole it from—to access e-mail on a company server, for example.

The antenna was detecting radio signals “leaking” from the transistors on the chip inside the phone performing the encryption calculations. Transistors leak those signals when they are active, so the pattern of signals from a chip provides an eavesdropper a representation of the work the chip is doing. When Kenworthy tuned his equipment to look in the right place, a clear, regular pattern of peaks and troughs appeared on his computer screen. They could be seen to come in two varieties, large and small, directly corresponding to the string of digital 1s and 0s that make up the encryption key.

The signal from an HTC Evo 4G smart phone was a direct transcript of the device’s key, used as part of a common cryptographic algorithm called RSA. The researchers required a more complex statistical analysis to successfully capture a key from another HTC device, which was used as part of an encryption scheme known as AES.

Read the complete article here.

Related Posts

Join EFF in Standing up Against Internet Censorship Over the past few weeks, we here at EFF have watched as whistleblowing website WikiLeaks has fueled an emotionally charged debate about the secrecy ...
A general public license for seeds? “The same multinational corporations that are putting their proprietary, genetically modified plants into the environment and onto our tables are also...
The MeeGo Progress Report: A+ or D-? The end of October saw the release of MeeGo 1.1, the second major milestone release of the platform since it burst onto the scenes in February 2010. T...
Benefits of the MeeGo Software Platform The MeeGo open source project is unique in that it offers benefits to everyone in the ecosystem starting from the developer all the way up to the oper...
Open source software fundamental to success in the mobile and consumer electronics markets By Ari Rauch, Linaro board member: Today more than ever before, our industry views open source software (OSS) as fundamental to success in the mobile ...
VLC developer takes a stand against DRM enforcement in Apple’s App Store Rémi Denis-Courmont is one of the primary developers of the VLC media player, which is free software and distributed under the GPL. Earlier this week...

We Recommend These Vendors

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).

Deploy an SSD Cloud server in 55 seconds on DigitalOcean. Built for developers and starting at $5:00/month (20 GB SSD, 512 MB of RAM).


  1. Pingback: رادیو گیک شماره ۲ – از فضا و فراسوی فضا « دگرگون

  2. Pingback: رادیو گیک شماره ۲ – از فضا و فراسوی فضا

  3. Pingback: Links 7/3/2012: NVIDIA Joins Linux Foundation, Android Easily Beats iOS in the US | Techrights

Leave a Comment

Your email address will not be published. Required fields are marked *