Thursday, March 28, 2024

AES-256 keys can be sniffed within Seconds Using €200 Worth Hardware kit

Side-channel attacks over AES is not new, previous attacks required a direct access. Now the security experts from Fox-IT and Riscure show how to covertly recover the encryption key with AES implementations.

The attacker needs to observe input or output data to launch this attack, so it is possible with publically available Network encryption devices. Instead of traditional oscilloscope method, security experts used radio hardware here.

Also read Evolution of TLS1.3 – Enhanced security and speed

Experts use a kit composed of the magnetic antenna connected to an external amplifier and bandpass filters that were bought online and then plugged it into a radio USB stick software, the recording equipment can go from extremely high-end radio equipment, down to €20 USB.

AES-256 keys can be sniffed within Seconds using €200 Hardware kit
                                                                      Used For Recording

Experts used the kit to read the signals for one block of AES-256 encryption running on the smartFusion2 target running on the ARM Cortex-M3 core. They can see a clear distinct pattern on each stage. Here is the PDF wrote by security experts from Fox-IT which demonstrates the complete analysis.

We see I/O to and from the Cortex-M3, calculations for the key schedule, and the
14 encryption rounds.To extract the key, instead of measuring signal they observed
many different encryption blocks with different inputs and attempt to model how
the device leaks information.

They took a set of Encryption block and correlate between either the(plaintext) input or (ciphertext) output data and our measurement traces. And by checking how well our measurements correlate with the number of “1” bits in the data (i.e. the data’s Hamming weight).

Also read Fast and Complete SSL Scanner to Find Mis-configurations affecting TLS/SSL

By executing this method, the experts could speculate the 256 possible values of a single byte.

Using this approach only requires us to spend a few seconds guessing the correct
value for each byte in turn (256 options per byte, for 32 bytes — so a total of
8192 guesses). In contrast, a direct brute-force attack on AES-256 would require
2(256) guesses and would not complete before the end of the universe.

With small loop antenna, the attack works only for a few CM, and they are not able to succeed with their goal of 1m if they increase distance signal drops out. So they switched to a Long PCB periodic antenna, which makes attack success even from 30cm.

Now the tests are performed in the close lab environments and not sure how it will perform open world noise environments, may be this technique need to be improved with another expensive equipment.

In practice, this setup is well suited to attacking network encryption appliances. Many of these targets perform mass encryption and the ciphertext is often easily captured from somewhere else in the network.

Also read MITM attack over HTTPS connection with SSLStrip

Website

Latest articles

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting...

Wireshark 4.2.4 Released: What’s New!

Wireshark stands as the undisputed leader, offering unparalleled tools for troubleshooting, analysis, development, and...

Zoom Unveils AI-Powered All-In-One AI Work Workplace

Zoom has taken a monumental leap forward by introducing Zoom Workplace, an all-encompassing AI-powered...

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Phishing allows hackers to exploit human vulnerabilities and trick users into revealing sensitive information...

2 Chrome Zero-Days Exploited at Pwn2Own 2024: Patch Now

Google has announced a crucial update to its Chrome browser, addressing several vulnerabilities, including...

The Moon Malware Hacked 6,000 ASUS Routers in 72hours to Use for Proxy

Black Lotus Labs discovered a multi-year campaign by TheMoon malware targeting vulnerable routers and...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles