TEMPEST Attacks Against AES Covertly stealing keys for $200 Craig - PowerPoint PPT Presentation

Feb 19, 2023 •181 likes •1.3k views

TEMPEST Attacks Against AES Covertly stealing keys for $200 Craig Ramsay & Jasper Lohuis September 22, 2017 Introduction Your code just pushes electrons around. 0010101 10 10101010010101 Pushing electrons will make magnetic fjelds.

OpenSSL AES Round 1 b 0,0 b 1,0 b 2,0 b 3,0 c 0,0 b 0,0 b 1,0 c 1,0 c 2,0 b 2,0 b 3,0 c 3,0 T 0 (...) b 0,1 b 1,1 b 2,1 b 3,1 b 0,1 c 0,1 c 1,1 b 1,1 b 2,1 c 2,1 c 3,1 b 3,1 T 1 (...) b 0,2 b 1,2 b 2,2 b 3,2 c 0,2 b 0,2 b 1,2 c 1,2 b 2,2 c 2,2 b 3,2 c 3,2 T 2 (...) b 0,3 b 1,3 b 2,3 b 3,3 b 0,3 c 0,3 c 1,3 b 1,3 c 2,3 b 2,3 c 3,3 b 3,3 T 3 (...) Round 1 Key
OpenSSL AES Round 1 b 0,0 b 1,0 b 2,0 b 3,0 c 0,0 b 0,0 b 1,0 c 1,0 c 2,0 b 2,0 b 3,0 c 3,0 T 0 (...) b 0,1 b 1,1 b 2,1 b 3,1 b 0,1 c 0,1 c 1,1 b 1,1 b 2,1 c 2,1 c 3,1 b 3,1 T 1 (...) b 0,2 b 1,2 b 2,2 b 3,2 c 0,2 b 0,2 b 1,2 c 1,2 b 2,2 c 2,2 b 3,2 c 3,2 T 2 (...) b 0,3 b 1,3 b 2,3 b 3,3 b 0,3 c 0,3 c 1,3 b 1,3 c 2,3 b 2,3 c 3,3 b 3,3 T 3 (...) Round 1 Key
OpenSSL AES Round 1 Attack these lookups. The non-linearity is useful. b 0,0 b 1,0 b 2,0 b 3,0 b 0,0 c 0,0 c 1,0 b 1,0 c 2,0 b 2,0 c 3,0 b 3,0 T 0 (...) b 0,1 b 1,1 b 2,1 b 3,1 b 0,1 c 0,1 b 1,1 c 1,1 c 2,1 b 2,1 c 3,1 b 3,1 T 1 (...) b 0,2 b 1,2 b 2,2 b 3,2 c 0,2 b 0,2 c 1,2 b 1,2 b 2,2 c 2,2 c 3,2 b 3,2 T 2 (...) b 0,3 b 1,3 b 2,3 b 3,3 b 0,3 c 0,3 c 1,3 b 1,3 c 2,3 b 2,3 c 3,3 b 3,3 T 3 (...) Round 1 Key
Our setup vs traditional setup
Recording comparison — ’Scope
Recording comparison — ’Scope Arm
Recording comparison — ’Scope Send 1 command
Recording comparison — ’Scope Trigger

Recommend

~130 Guests >80M tempest tests run in gate queue during

~130 Guests >80M tempest tests run in gate queue during kilo Each proposed patch spins up between 4 and 20 devstack environments for running tests Each tempest run starts ~130 guests in the

413 views • 20 slides

Soft Tempest: Hidden Data Transmission Using Electromagnetic Emanations Markus G. Kuhn and

Soft Tempest: Hidden Data Transmission Using Electromagnetic Emanations Markus G. Kuhn and Ross J. Anderson Computer Laboratory http://www.cl.cam.ac.uk/~mgk25/ih98-tempest-slides.pdf The History of Compromising Emanations MI5 used in the

407 views • 14 slides

The Tempest (Proprioception & Painting) Andre Ru, Sahil Narula, Sneha Desai, Sumeet Ranka

The Tempest (Proprioception & Painting) Andre Ru, Sahil Narula, Sneha Desai, Sumeet Ranka December 13, 2018 Overview Proprioception Topics Painting Experiment The Tempest Overview Theatrical presentation leveraging

363 views • 21 slides

Tempest: Integrated OpenStack Testing Matthew Treinish mtreinish@kortar.org May 12, 2014

Tempest: Integrated OpenStack Testing Matthew Treinish mtreinish@kortar.org May 12, 2014 OpenStack is Complicated Testing before Tempest Every project had its own unit tests Some projects had functional tests There was nothing to

436 views • 21 slides

WhatTheStack? Verify your Deployments using Tempest Christian Schwede | @cschwede_de | Nick

544 views • 27 slides

Sea Change Origin Neuroplasticity-A Paradigm Sea From Shakespeare's The Tempest , 1610: Change

2/10/2010 Sea Change Origin Neuroplasticity-A Paradigm Sea From Shakespeare's The Tempest , 1610: Change ARIEL [ sings] : Dominick M. Maino, Full fathom five thy father lies; OD MEd FAAO OD, MEd, FAAO, Of his bones are coral made; Of his

96 views • 9 slides

Upstream CI/CD tools for your production clouds That can operate 1,000+ test cycles in a day

Upstream CI/CD tools for your production clouds That can operate 1,000+ test cycles in a day Slide URL: https://goo.gl/aZ3Tq3 Masayuki Igawa Core in Tempest, openstack-health, subunit2sql 2 Ghanshyam Mann Core in Tempest 3 Kenichi

659 views • 43 slides

The Tempest Lesson 4 Learning Objective How does Shakespeare present the relationship between

The Tempest Lesson 4 Learning Objective How does Shakespeare present the relationship between Miranda and Prospero? Act 1 Scene 2 - Discussion Highlight words and phrases in Miranda s speech that show the power of the storm. Copy words

401 views • 6 slides

CDA Technology and Design Overview ubomr Hribk www.tempest.technology CDA DESIGN

CDA Technology and Design Overview ubomr Hribk www.tempest.technology CDA DESIGN HIGHLIGHTS Built to serve as national archive for preservation of Slovak cultural heritage According to OAIS model, CDA is federated archive with 3

401 views • 22 slides

DDP Technology and Design Overview ubomr Hribk www.tempest.technology REQUIREMENTS

DDP Technology and Design Overview ubomr Hribk www.tempest.technology REQUIREMENTS Catalogue with .sk domains and manually added Archive with almost identical copies of webpages Archive for e-born documents Support for

313 views • 6 slides

Combatting electoral traces The Dutch tempest discussion and beyond Wolter Pieters My background

Combatting electoral traces The Dutch tempest discussion and beyond Wolter Pieters My background Computer scientist & applied philosopher PhD Radboud University of Nijmegen 2007-2008 Dutch Ministry of the Interior (this work only

537 views • 29 slides

NETWORKING ATTACKS NETWORKING ATTACKS NOTICES Lab #2 extended to Feb. 17 @ 23:59 HW #3

CMPS122: COMPUTER SECURITY NETWORKING ATTACKS NETWORKING ATTACKS NOTICES Lab #2 extended to Feb. 17 @ 23:59 HW #3 due tonight NETWORKING ATTACKS LAST TIME TCP/IP networking stack Physical layer Data link layer Network

1.1k views • 61 slides

Art and Approximation Micah Thanhauser & Jack deTar Rebecca Maxfield Ben Freeman The Tempest

Articulating the Edge: Art and Approximation Micah Thanhauser & Jack deTar Rebecca Maxfield Ben Freeman The Tempest : Magic, Movement, and Methexis Rebecca Maxfield, B.A. Performance Studies Movement and the body Space, creation,

604 views • 6 slides

TEMPEST SHIELDING www.euro-emc.co.uk +44 (0)1799 523073 info@euro-emc.co.uk 1

TEMPEST SHIELDING www.euro-emc.co.uk +44 (0)1799 523073 info@euro-emc.co.uk 1 European EMC Products Limited EUROPEAN EMC PRODUCTS LIMITED was formed in July 1996 to supply high quality products and services to the EMC

432 views • 30 slides

Physical Information Security Fall 2009 CS461/ECE422 Computer Security I Reading Material

Physical Information Security Fall 2009 CS461/ECE422 Computer Security I Reading Material Secrets of Computer Espionage Chapter 5 Soft TEMPEST paper http://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf Outline Forensics/Spying

771 views • 47 slides

Physical Information Security Fall 2010 CS461/ECE422 Computer Security I Reading Material

Physical Information Security Fall 2010 CS461/ECE422 Computer Security I Reading Material Secrets of Computer Espionage Chapter 5 Soft TEMPEST paper http://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf Outline Forensics/Spying

595 views • 46 slides

Generic Attacks on Stream Ciphers John Mattsson Generic Attacks on Stream Ciphers 2/22

Generic Attacks on Stream Ciphers John Mattsson Generic Attacks on Stream Ciphers 2/22 Overview What is a stream cipher? Classification of attacks Different Attacks Exhaustive Key Search Time Memory Tradeoffs

656 views • 22 slides

EoFTTC LAUNCH ALEX TEMPEST DIRECTOR OF PARTNERS 21

EoFTTC LAUNCH ALEX TEMPEST DIRECTOR OF PARTNERS 21 NOVEMBER 2013 EoFTTC LAUNCH LANCE SPENCER DIRECTOR OF CONNECTIVITY 21 NOVEMBER 2013 AGENDA

587 views • 39 slides

Video eavesdropping- RF Y.K. Roland Tai 1. Introduction 2. History of TEMPEST 3. Type of RF

11/8/2009 Security : Forensic Signal Analysis: MPHIL ACS 2009 Security : Forensic Signal Analysis Video eavesdropping- RF Y.K. Roland Tai 1. Introduction 2. History of TEMPEST 3. Type of RF leakages 4. Counter-measures. 5. Experiment &

828 views • 23 slides

Wireless Security Wireless Network Attacks Access control attacks These attacks attempt to

Wireless Security Wireless Network Attacks Access control attacks These attacks attempt to penetrate a network by using wireless or evading WLAN access control measures, like AP MAC filters and 802.1X port access controls. Type of Attack

184 views • 7 slides

Gambling Harm Introduction & Awareness 8 th June 2020 LawWorks Caitlin Tempest The Gambling

Gambling Harm Introduction & Awareness 8 th June 2020 LawWorks Caitlin Tempest The Gambling Support Service Raise Deliver Support awareness training you What is gambling? What is gambling? Gambling is betting, gaming or

872 views • 28 slides

Backbone Infrastructure Attacks and Protections draft-savola-rtgwg-backbone-attacks-01.txt Pekka

Backbone Infrastructure Attacks and Protections draft-savola-rtgwg-backbone-attacks-01.txt Pekka Savola Introduction Describes a view of ISP backbone network attacks Lots of folks in IETF and elsewhere had quite different ideas whats out

529 views • 9 slides

CROSS SITE SCRIPTING (XSS) ATTACKS Injection attacks 3/18/19 1 Whoami Ad Adam Nu Nurudin

CROSS SITE SCRIPTING (XSS) ATTACKS Injection attacks 3/18/19 1 Whoami Ad Adam Nu Nurudin ini CEH, ITIL L V3, 3, CCNA, CCNP, CASP, PCI-DS DSS.. .. Lead Security Researcher @ Netwatch Technologies Project Consultant, Information

377 views • 20 slides

Dealing with cache based attacks in cryptography Speculating on cache attacks Simo Sorce Sr.

Dealing with cache based attacks in cryptography Speculating on cache attacks Simo Sorce Sr. Principal Software Engineer 2019/02/19 What are cache based attacks ? In cryptography In cryptographic operations, leaking the internal state of a

338 views • 8 slides