6
$\begingroup$

This article shows a 4096 bit key being cracked by using a microphone and listening to your computer's cpu. I do not know if this is true at all.

I am doing a presentation on RSA Security and I would like to include the largest RSA encryption to be cracked.

$\endgroup$
  • 2
    $\begingroup$ Those kind of attacks often work without consideration of the key size, much like the padding oracle attacks on AES/CBC. Often "cracking" a 8192 bit key with side channel attacks is just 2 times harder than attacking a 4096 bit key. Stressing the key length for these kind of attacks doesn't make sense at all. Key length isn't all that important. 99% of the time when cryptography is cracked (or subverted) the key length is not the issue. If you do a presentation you should stress that. I'd go as far as stating that if you focus on key length that you show ignorance of the field. $\endgroup$ – Maarten Bodewes Jan 7 '17 at 0:34
  • $\begingroup$ You’re mixing up things. The attack in that article is an acoustic one (See my related question about it, which was posted 2013). The attack is totally unrelated to factoring things or their size/length. $\endgroup$ – e-sushi Apr 4 '18 at 20:40
12
$\begingroup$

TL;DR:

This is not the same kind of attacks. You cannot compare factoring and side channel.

All unfactored parts of the numbers $2^n − 1$ with $n$ between 1000 and 1200 were factored by a multiple-number-sieve approach in which much of the sieving step could be done simultaneously for multiple numbers, by a group including T. Kleinjung, J. Bos and A. K. Lenstra, [...] n=1199 on December 11, 2014

source


The paper of this attack is RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis by Daniel Genkin, Adi Shamir and Eran Tromer. Given the quality of the article and the names of the researcher, it is really hard to doubt the paper content. But be wary that press tend to make things worse than they actually are. e.g. a year ago, we had a paper on Freestart collision for full SHA-1, immediate press emphasis: SHA-1 is broken, we have a collision!

In the paper you can read:

Modern RSA security standards mandate key sizes of at least $2048$ bits (i.e., $1024$ bit primes $p$;$q$) in order to achieve adequate levels of security [BBB+12]. For concreteness, in the following we consider even larger keys, of size 4096 bit (and 2048-bit primes), which should be secure beyond the year 2031 [BBB+12]. We show an attack that can extract whole 4096-bit RSA keys within about one hour using just the acoustic emanations from the target machine.

The choice of the size of the 4096 bit number is more as a Proof of Concept that it is possible to do it with big number. You could assume that they can even do it with 8192 bit keys...

What you must show in your talk, is that even if this 4092 key has been broken, it is not the same kind of attacks. Here we are in the case of a physical attack rather than a factorization attack. It is the same as comparing side-channel attacks on AES as opposed to the usual cryptanalysis.

I suggest you have a look at the RSA challenge and Integer factorization records.

Some graph you might also be interested in:

enter image description here

Also related:

$\endgroup$
  • 1
    $\begingroup$ I think "it is really hard to doubt that it is not true" is the opposite of what you want. Either way, it would be clearer with fewer negatives. $\endgroup$ – bmm6o Jan 6 '17 at 16:27
  • $\begingroup$ updated. Feel free to suggest edit too. $\endgroup$ – Biv Jan 6 '17 at 16:30
  • $\begingroup$ A collision in the compression function is more than enough breakage to stop trusting a hash function. Saying the hash function is broken is certainly justified under those circumstances. $\endgroup$ – kasperd Jan 6 '17 at 20:53
  • 3
    $\begingroup$ I am not denying that, what I am trying to emphasis here is that medias tends to make everything bigger than they actually are. $\endgroup$ – Biv Jan 6 '17 at 21:10
3
$\begingroup$

For a perfectly secure and correct RSA implementation, factoring the modulus is the best attack we know of.

The largest RSA modulus factored (also the largest semi-prime factored) is RSA-768, of the RSA Challenge.

If you can't attack the math, you can attack the implementation, like in the side-channel attack you mentioned.

Another example would be exploiting weak random number generators like this, where a weak random number generator generated public keys with common factors.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.