Resourceful hackers used iPhone 13 to steal Samsung Galaxy’s cryptographic keyHere’s how to stop them

[ad_1]

Researchers have successfully hacked an Android smartphone using an iPhone to steal a cryptographic key.

Light Rocket via Getty Images

There’s an old joke that asks how many hackers does it take to change a light bulb? The correct answer is none because no one knew the light bulb had even been changed. Kidding aside, what if a hacker could use a light bulb as part of an exploit? I’m not talking about spying on you using a light bulb or even the device’s power LED. But what if I told you that hackers have already demonstrated how they can actually steal a cryptographic secret key by recording power LEDs? What if I told you that they have already used an iPhone to steal such a key from a Samsung Galaxy smartphone?

Power LEDs as a Hacking Tool

The National Security Agency (NSA) is well aware of a military espionage technique known as TEMPEST, which focuses on leaking emanations such as sound, vibration, and radio or electrical signals. . During the Cold War era, such eavesdropping techniques were employed by beaming a laser microphone over a window to eavesdrop on conversations inside.

ADVERTISEMENT

Fast forward to 2021, when security researchers used an analysis of optical emanations from speaker LED power indicators to retrieve and record sound. Invisible to the naked eye, the minute fluctuations in LED intensity could be read by an electro-optical sensor attached to a telescope.

Roll another few years, and now researchers at Israel’s Ben-Gurion University of the Negev have advanced the type of side-channel attack yet again by using an iPhone 13 Pro Max’s video camera to steal a key. cryptography from a Samsung Galaxy S8 Smartphone.

MORE FROM FORBESawarning issued to iPhone users as iMessage 0-Click attack comes to lightBy Davey Winder

ADVERTISEMENT

iPhone 13 Pro Max to steal the cryptographic key

In their research paper titled Video-Based Cryptanalysis: Extracting Cryptographic Keys from Video Footage of a Power LED Devices, the researchers propose video-based cryptanalysis as a new method used to recover secret keys to a device by analyzing footage video of a device power. DIRECTED.

The researchers, Ben Nassi, Etay Iluz, Or Cohen, Ofek Vayner, Dudi Nassi, Boris Zadov and Yuval Elovici, were able to demonstrate how secret keys could be harvested from uncompromised devices using videos recorded by consumer video cameras such as found in an iPhone 13 Pro Max. Video, i.e. device power LEDs.

This is explained in the document as being possible thanks to the fact that the cryptographic calculations performed by the CPU change the power consumption of the device, which affects the brightness of the device’s power LED.

ADVERTISEMENT

Hackers put power LEDs in the frame

Video footage from a full-frame power LED is shot, and the camera’s rolling shutter is then used to increase the sample rate to 60,000 measurements per second in the case of the iPhone 13 Pro Max. This then makes it possible to analyze the video frames in the RGB space and to deduce therefrom the associated RGB values ​​in order to recover the secret key by inducing the electrical consumption of the device from the RGB values.

In the case of the Samsung Galaxy S8 target device, which contains a 378-bit Supersingular Isogeny Key Encapsulation (SIKE) secret key, a side channel exploit was used. This involved analyzing the video from the Logitech Z120 USB speakers connected to the S8, or rather the power LED of these speakers connected to the same USB hub used to charge the smartphone.

Plausibility of attack outside of Hacker Lab

You’ve probably already started wondering how much you should worry about this type of research. And the truth is, outside of the hacking lab, it’s probably not something that will get much use. Not at least because success requires a number of elements that really don’t stand up to real-world use.

ADVERTISEMENT

Ben Nassi is a board member of BlackHat as well as a frequent speaker at hacker conferences including BlackHat, DEFCON, and Hack-in-the-Box (HITB), in addition to being one of the researchers involved in this newly evolved attack methodology. In its Research FAQ, Nessi concedes that the ability to exploit these stolen cryptographic keys (a smart card reader was also targeted) relies on a vulnerability in the cryptographic libraries themselves. Power LEDs are simply the method used to visually exploit the vulnerability. Making sure you’re using the latest libraries would negate the attack exploiting the HertzBleed and Minerva vulnerabilities here, Nessi says.

MORE FROM FORBESNew Emergency Google Chrome Security Update – 0Day Exploit ConfirmedBy Davey Winder

Then there is the line of sight requirement. The video camera must be able to see the power LED in question. For the smart card attack, that meant a camera could be up to 62 feet away, but for the Samsung Galaxy S8 attack, the iPhone had to be in the same room. Not only that, the S8 attack took, uh, 18 days of video.

ADVERTISEMENT

If those mitigating factors weren’t enough, if you’re really paranoid about your security and think someone might be using such high-tech methods to grab your cryptographic keys, then a little tape over all the LEDs on your computer. power supply would do.

Which is not to minimize research; far from it, because it’s just that kind of envelope pushing that ultimately makes us safer from malicious actors. But it must be answered with a proportionate response. There really is no need to worry about lab research. Instead, focus on all the bad things that already exist.

[ad_2]