Viewing profile — powerbutton65

Like it or not they are technically correct. SHA-256 is a one way compression and furthermore the PoW for bitcoin doesn't require a match for the entire hash. There's loads of exam…

No worries :) I've moved to silicon design and verification so quite a stretch from my previous work!

Unfortunately that is the one thing I can't really answer! I moved out of this space shortly after we published this work so I'm not currently up to date with the research in the a…

Never thought I'd end up on here! I'm one of the authors on the paper, it's few years old now but I'm happy to try answer any questions related to the work.

Yes, this exactly the basis of differential power analysis. This was first demonstrated back in 1999 by Kocher et al [0] [0]: https://www.cis.upenn.edu/~nadiah/courses/cis800-02-f1…

The authors cite some EM side-channel attacks in the paper (eg [0,1]) [0]: https://eprint.iacr.org/2015/561.pdf [1]: https://eprint.iacr.org/2015/727.pdf

Constant time only reduces the chance of 'simple power analysis' (SPA) which is predominantly what the authors perform ('simple' is misleading but it's just the name for it). There…

Valid question. You shift the burden from being a cryptography related problem to signal processing related problem.

The Apple hardware perspective is mostly just a gimmick. The side-channel leaks are a direct result of the ARM IP core (also not Apple proprietary). This is arguably old news, peop…

The paper serves to demonstrate that electromagnetic side-channel attacks on mobile devices (even almighty Apple stuff) are feasible. ECDSA is just an example they chose. Also, Cur…

It's great to see this kind of work published. It is worth noting however that the US government is well aware of these kind of attacks. The Snowdon docs show that the CIA have bee…