Video-Based Cryptanalysis: Recovering Cryptographic Keys from Device Using Video of Power LED
summary
Video of a device power LED yields measurable power traces via rolling shutter on commodity cameras, enabling key recovery. Exploits use an iPhone 13 Pro Max or hijacked security cameras, boosting sampling from 60 Hz to 60k measurements per second and extracting timing of cryptographic operations. An ECDSA key is recovered by feeding estimated signing times to Minerva with about ~4,000 signatures, a smart‑card reader is broken from an Internet camera 16 m away, and a Samsung S8 secret is recovered after iterations plus error correction with 99% accuracy.
AI-written summary · about
chapters (8)
- 0:00Video-based cryptanalysis intro
- 3:20Power LEDs as vectors
- 15:11Threat models
- 17:02Rolling shutter sampling
- 21:20ECDSA keys with Minerva
- 30:26RSA keys with Herz B
- 36:51Limitations and future
- 38:16Key takeaways
related talks
59mBreaking AES with side channel analysis
28mOne&Done: A Single-Decryption EM-Based Attack on OpenSSL’s Constant-Time Blinded RSA
16mReverse Engineering the Eufy Ecosystem: A Deep Dive into Security Vulnerabilities...
41mUnlocking Any Door In 21st Century. Immersion In Bio-Security
44mEUCLEAK
01h 02mCryptographic Side-Channels on Embedded Devices
39mNo Free Charge Theorem 2.0: How to Steal Private Information from a Mobile Device Using a Powerbank
40mHis Power Level is Over 9000! Vulnerabilities in Solar Panel Controllers