Storing secret crypto keys in the Amazon cloud? New attack can steal them
http://arstechnica.com/security/2015/09/storing-secret-crypto-keys-in-the-amazon-cloud-new-attack-can-steal-them/
Now a separate team of researchers has constructed a new
method for recovering the full private key used in a modern
implementation of the widely used RSA crypto system. Like the
2009 work, the new research implements a CPU cache attack across
two Amazon accounts that happen to be located on the same chip
or chipset. They recently used their technique to allow one
Amazon instance to recover the entire 2048-bit RSA key used by a
separate instance, which they also happened to control. The
newer technique works by probing the last level cache of the
Intel Xeon processor chipsets used by Amazon computers.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
