How well does the XBox One do against sidechannel crypto attacks?

SemiAccurate asked around and got some surprising answers

Nov 6, 2013 by

XBox One LogoSecurity is said to be a fundamental feature of the PS4 and XBox one so how well do they do against sidechannel attacks? SemiAccurate can only answer that question for half of the new crop at the moment but stay tuned for the other half, we expect results soonish.

Sidechannel or sideband attacks are simple enough to describe, you don’t look at the input or output data as a normal crypto attack does, you look at indirect items. Things like CPU power use, time to completion, EMI, and other related numbers paint the picture in this type of attack. From that you can either discern the keys directly or narrow the keyspace substantially. These type of attacks don’t require sophisticated tools and in the hands of a knowledgeable attacker are remarkably effective.

Rambus bought a company called Cryptography Research about two years ago, they specialize in technology to defend against this type of attack. As far as demos go, theirs is one of the best you will see at a trade show, they can rip the public and private keys out of a smartphone or device in seconds. Sure there is tons of boring gruntwork done before the demo to find trace locations, frequencies, and places to put a probe but that is relatively rote.

At IDF 2011 Rambus/Cryptography Research personnel were showing off how to grab keys quickly and even at a bit of a distance. At ARM Techcon 13 last week they were showing off slightly updated demos of pulling keys off smartphones with EMI, timing, and power based attacks. If you can run a crypto loop on any modern hardware, with some talented interns and an evil genius guiding them, you should be able to grab the root keys faster than you can say, “NSA backdoor”.

That got us thinking about the PS4 and XBox One, engineers in both camps claim that security is job one but is it? Would the new consoles fare any better than the smartphones that lost war in under a minute? Did security mean real security or just another humorous attempt to extract money from consumers by selling their removed rights back to them? Since neither console is out yet the task was a bit tougher than usual but a few well placed calls to some aforementioned evil geniuses got us the answer to half the question.

Note: The following is for professional and student level subscribers.

Disclosures: Charlie Demerjian and Stone Arch Networking Services, Inc. have no consulting relationships, investment relationships, or hold any investment positions with any of the companies mentioned in this report.

The following two tabs change content below.
My Twitter profileMy Google+ profileMy LinkedIn profile

Charlie Demerjian

Roving engine of chaos and snide remarks at SemiAccurate
Charlie Demerjian is the founder of Stone Arch Networking Services and SemiAccurate.com. SemiAccurate.com is a technology news site; addressing hardware design, software selection, customization, securing and maintenance, with over one million views per month. He is a technologist and analyst specializing in semiconductors, system and network architecture. As head writer of SemiAccurate.com, he regularly advises writers, analysts, and industry executives on technical matters and long lead industry trends. Charlie is also available through Guidepoint and Mosaic. FullyAccurate