Latest Podcast



Featured Articles

Ofcom says mobile contracts should ditch inflation-related price rises

Ofcom says mobile contracts should ditch inflation-related price rises

UK telecoms regulator Ofcom wants to ban inflation-related rises in phone and broadband contracts. Instead, it says any potential mid-contract price rises should be set out in pounds and pence.
Author: The Fonecast
0 Comments
Article rating: No rating

Global smartphone market is set for recovery, says new forecast

A new forecast from research specialists Canalys shows the smartphone market is set to recover next year. Worldwide shipments declined by 12% last year but that decline is expected to slow to 5% this year.
Author: The Fonecast
0 Comments
Article rating: No rating
Vodafone and Three plan to merge their UK businesses

Vodafone and Three plan to merge their UK businesses

New Hutchison/Vodafone network would be biggest UK operator

Vodafone Group plc and CK Hutchison Group Telecom Holdings Limited have agreed to combine their UK telecommunication businesses, respectively Vodafone UK and Three UK. The merger will create a large new network operator to compete with Virgin Media O2 and EE.
Author: The Fonecast
0 Comments
Article rating: No rating

UK mobile payment service Paym to close in March 2023

UK mobile payment service Paym will close on 7th March 2023. The service, which allowed users to make and receive payments using their mobile phone numbers, was launched in 2014.
Author: The Fonecast
0 Comments
Article rating: No rating
Qualcomm legal action moves forward in the UK

Qualcomm legal action moves forward in the UK

Which? seeks payout for Samsung and Apple smartphone owners

Consumer protection organisation Which? has been given permission by the UK's Competition Appeal Tribunal to represent Apple and Samsung smartphone buyers in a legal case against chip manufacturer Qualcomm.
Author: The Fonecast
0 Comments
Article rating: No rating
RSS

Opinion Articles

Sunday, March 11, 2012

Hacking a smartphone by using differential power analysis

Mark Bridge writes:

Mobile security always seems to be on the agenda – but one of the companies demonstrating its services at Mobile World Congress 2012 had a particularly stark warning.

Cryptography Research was demonstrating what’s called differential power analysis (DPA) or side-channel analysis, which can be used to reveal encrypted information from a smartphone or tablet without ever needing to get hold of the device.

I called in to see the company and started by learning a little more about what they actually did.

Carole Coplan, vice president of Business Development, gave me a brief background to the company. It was founded in 1995 by Paul Kocher, who’s perhaps best known for helping to write the Secure Sockets Layer (SSL) 3.0 protocol used for secure communications on the internet.

Paul’s discovery of differential power analysis showed that secret codes could be revealed by analysing the power consumption of semiconductors. At a very simple level, a computer processor that’s working hard will consume more power than a processor that’s not doing much. But you can discover much more than ‘busy’ or ‘not busy’. It’s possible to work out exactly what a processor is doing by monitoring its power consumption – and this monitoring can even be conducted by tracking electromagnetic radiation from several metres away. With the right equipment, you can see every single one of a chip’s processes… and if the chip is using a secret code for payment or authentication, that data can be seen as well.

Dr Pankaj Rohatgi, director of engineering at Cryptography Research, demonstrated the risk to security. Using a radio receiver bought from eBay for $300, an off-the-shelf radio antenna and a digitiser/oscilloscope, the ‘0’ and ‘1’ bits of a supposedly secure key could be seen on screen. Although the maximum range of this demonstration was only a few metres, the increasing use of NFC services – and the ability to install a thin wire aerial near to a legitimate NFC reader – would certainly give cause for concern.

Fortunately, as Carole Coplan explained, well-established processes such as NFC payment cards were already protected by licensed patents from Cryptography Research – and many of the NFC chips in smartphones and tablets also have built-in ‘DPA countermeasures’ to protect them. In fact, last year more than 6 billion security products were made under a license from Cryptography Research.

Should consumers be worried about ‘hacking’ via power analysis?  For most people, I’d say the answer’s ‘no’. But for organisations that are relying on smartphones and tablets to store or process secure information, it’s wise to remember the words of Star Trek’s Chief Engineer Montgomery Scott on the USS Enterprise.

“I cannot change the laws of physics”, said Scotty... although he did often made them work to his advantage.

Listen to my full interview with Carole Coplan and Pankaj Rohatgi on TheFonecast.com. via iTunes, by subscribing to our RSS feed or by downloading the MP3.
Print
Author: The Fonecast
0 Comments
Rate this article:
No rating

Leave a comment

This form collects your name, email, IP address and content so that we can keep track of the comments placed on the website. For more info check our Privacy Policy and Terms Of Use where you will get more info on where, how and why we store your data.
Add comment

Recent Podcasts

A week of mobile industry news, from UK 'not spot' coverage proposals to Microsoft's new non-Nokia smartphone

Podcast - 12th November 2014

This week's podcast begins with a heated discussion about the UK government's consultation about improving mobile phone coverage.

Iain, James and Mark then move on to talk about over-the-top voice services, mobile internet usage, patent deals, the UK's next spectrum auction and wearable technology.

Author: The Fonecast
0 Comments
Article rating: No rating

Talking about mobile ticketing with Ashley Murdoch of Corethree

Podcast - 7th November 2014

Leaving your wallet at home and going shopping with nothing more than your mobile phone is still a science-fiction vision of the future.

But it's getting much closer to reality, thanks to a UK-based company called Corethree. They're currently working with a number of public transport operators and have brought mobile tickets to a wide range of smartphones.

Author: The Fonecast
0 Comments
Article rating: 5.0

New products from Microsoft, Samsung and Huawei... plus the rest of the week's news

Podcast - 5th November 2014

The new Microsoft Band, the Samsung Galaxy A smartphones and the Huawei Honor 6 are all discussed in this week's podcast.

We also look at some of the mobile industry's other big stories, including Amazon UK's mobile phone deals, the Lenovo purchase of Motorola Mobility, LG's quarterly results and the anticipated increase in WiFi hotspots.

Author: The Fonecast
0 Comments
Article rating: No rating

Big numbers for EE, Apple, smartwatches and the Internet of Things

Podcast - 29th October 2014

We start this week's podcast with news that EE now has the largest 4G customer base in Europe, with 5.6 million UK connections.

There's also talk about a new DIY product for the Internet of Things, the disappearance of Nokia branded smartphones, quarterly results for Apple, increasing M2M connections and a growing market for smartwatches.

Author: The Fonecast
0 Comments
Article rating: No rating

The latest UK mobile industry podcast, including new devices from Apple, Google and will.i.am

Podcast - 22nd October 2014

The new Apple iPad tablets, Google's latest Nexus devices, Android Lollipop, wearable tech from will.i.am and the world's slimmest smartphone all feature in this week's podcast.

We're also talking about free mobile data for Christmas, 4.5G technology being rolled out in the UK, 5G technology being tested in South Korea, the end of an era for webOS and video messages that self-destruct.

Author: The Fonecast
0 Comments
Article rating: 5.0
RSS
135678910Last

Follow thefonecast.com

Twitter @TheFonecast RSS podcast feed
Find us on Facebook Subscribe free via iTunes

Archive Calendar

«May 2024»
MonTueWedThuFriSatSun
293012345
6789101112
13141516171819
20212223242526
272829303112
3456789

Archive

Terms Of Use | Privacy Statement