Friday, April 12, 2024

AES-256 keys can be sniffed within Seconds Using €200 Worth Hardware kit

Side-channel attacks over AES is not new, previous attacks required a direct access. Now the security experts from Fox-IT and Riscure show how to covertly recover the encryption key with AES implementations.

The attacker needs to observe input or output data to launch this attack, so it is possible with publically available Network encryption devices. Instead of traditional oscilloscope method, security experts used radio hardware here.

Also read Evolution of TLS1.3 – Enhanced security and speed

Experts use a kit composed of the magnetic antenna connected to an external amplifier and bandpass filters that were bought online and then plugged it into a radio USB stick software, the recording equipment can go from extremely high-end radio equipment, down to €20 USB.

AES-256 keys can be sniffed within Seconds using €200 Hardware kit
                                                                      Used For Recording

Experts used the kit to read the signals for one block of AES-256 encryption running on the smartFusion2 target running on the ARM Cortex-M3 core. They can see a clear distinct pattern on each stage. Here is the PDF wrote by security experts from Fox-IT which demonstrates the complete analysis.

We see I/O to and from the Cortex-M3, calculations for the key schedule, and the
14 encryption rounds.To extract the key, instead of measuring signal they observed
many different encryption blocks with different inputs and attempt to model how
the device leaks information.

They took a set of Encryption block and correlate between either the(plaintext) input or (ciphertext) output data and our measurement traces. And by checking how well our measurements correlate with the number of “1” bits in the data (i.e. the data’s Hamming weight).

Also read Fast and Complete SSL Scanner to Find Mis-configurations affecting TLS/SSL

By executing this method, the experts could speculate the 256 possible values of a single byte.

Using this approach only requires us to spend a few seconds guessing the correct
value for each byte in turn (256 options per byte, for 32 bytes — so a total of
8192 guesses). In contrast, a direct brute-force attack on AES-256 would require
2(256) guesses and would not complete before the end of the universe.

With small loop antenna, the attack works only for a few CM, and they are not able to succeed with their goal of 1m if they increase distance signal drops out. So they switched to a Long PCB periodic antenna, which makes attack success even from 30cm.

Now the tests are performed in the close lab environments and not sure how it will perform open world noise environments, may be this technique need to be improved with another expensive equipment.

In practice, this setup is well suited to attacking network encryption appliances. Many of these targets perform mass encryption and the ciphertext is often easily captured from somewhere else in the network.

Also read MITM attack over HTTPS connection with SSLStrip


Latest articles

6-year-old Lighttpd Flaw Impacts Intel And Lenovo Servers

The software supply chain is filled with various challenges, such as untracked security vulnerabilities...

Hackers Employ Deepfake Technology To Impersonate as LastPass CEO

A LastPass employee recently became the target of an attempted fraud involving sophisticated audio...

Sisence Data Breach, CISA Urges To Reset Login Credentials

In response to a recent data breach at Sisense, a provider of data analytics...

DuckDuckGo Launches Privacy Pro: 3-in-1 service With VPN

DuckDuckGo has launched Privacy Pro, a new subscription service that promises to enhance user...

Cyber Attack Surge by 28%:Education Sector at High Risk

In Q1 2024, Check Point Research (CPR) witnessed a notable increase in the average...

Midnight Blizzard’s Microsoft Corporate Email Hack Threatens Federal Agencies: CISA Warns

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive concerning a...

Taxi App Vendor Data Leak: 300K Passengers Data Exposed

Around 300,000 taxi passengers' personal information was left exposed on the internet, causing concern...
Guru baran
Guru baran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Top 3 SME Attack Vectors

Securing the Top 3 SME Attack Vectors

Cybercriminals are laying siege to small-to-medium enterprises (SMEs) across sectors. 73% of SMEs know they were breached in 2023. The real rate could be closer to 100%.

  • Stolen credentials
  • Phishing
  • Exploitation of vulnerabilities

Related Articles