Attacking OpenSSL using Side-channel Attacks: The RSA case study

By Praveen Vadnala , Lukasz Chmielewski on 04 Aug 2017 @ Sha
📄 Whitepaper 🔗 Link
reverse-engineering vulnerability-management security-architecture embedded-security
Focus Areas: Hardware Security , IoT Security , Malware Analysis , Reverse Engineering , Security Architecture , Vulnerability Management

Abstract

Side channel attacks (SCA) gained attention in the past years. New low cost tools like Chip-Whisperer proved that these attacks are not any more a theoretical, academic risk but a real threat to the security of the embedded systems. Many cryptographic products are now being developed having this attacks in mind and countermeasures are being implemented. This is the case of the omnipresent OpenSSL, which implement protections against side channel attacks to prevent the extraction of the secret key. In our presentation, we will briefly introduce SCA to the audience and discuss later the countermeasures implemented in the OpenSSL RSA and our attack that allows us to bypass them. #NetworkSecurity