Abstract:

In this talk I will present a new type of software-based side
channel attack, which can be applied to many types of
cryptosystems implemented on modern microprocessors. The attack
is highly practical, and can be mounted whenever the attacker
can run his own program (even as Java code in a protected
sandbox) in parallel with the encryption process. In particular,
we demonstrated the extraction of the full 128-bit AES key of
the standard Linux disk encryption process in 65 milliseconds by
calling it with a totally unprivileged program about 800 times.

The talk will be completely self contained.

Joint work with Eran Tromer and Dag Arne Osvik.