Dal suono del processore riescono ad estrarre la chiave privata PGP:

"""
Here, we describe a new acoustic cryptanalysis key extraction attack,
applicable to GnuPG's current implementation of RSA. The attack can
extract full 4096-bit RSA decryption keys from laptop computers (of
various models), within an hour, using the sound generated by the
computer during the decryption of some chosen ciphertexts. We
experimentally demonstrate that such attacks can be carried out, using
either a plain mobile phone placed next to the computer, or a more
sensitive microphone placed 4 meters away.
"""
http://www.cs.tau.ac.il/~tromer/acoustic/

Se avete la versione 1.x di GnuPG aggiornate!
http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000337.html

Clauz


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Wireless mailing list
[email protected]
http://ml.ninux.org/mailman/listinfo/wireless

Rispondere a