<story><title>Tempest attacks against AES: Stealing keys using minimal equipment [pdf]</title><url>https://www.fox-it.com/nl/wp-content/uploads/sites/12/Tempest_attacks_against_AES.pdf</url></story><parent_chain><item><author>wizeman</author><text>Are there any modern crypto algorithms that are, by design, immune from an attack such as this? Would not having any key-dependent code paths be sufficient to prevent this attack?&lt;p&gt;If it is possible to be immune by design to power analysis, timing and tempest attacks, is there a list of such algorithms somewhere that I can look it up? My google-fu hasn&amp;#x27;t returned anything useful.</text></item></parent_chain><comment><author>5gaKanchAFD2</author><text>No algorithm is secure by design against these DPA attacks.  They exploit data-dependencies.&lt;p&gt;The only &amp;#x27;provably secure&amp;#x27; (e.g., on paper (+)) countermeasure you can apply to these symmetric schemes is something typically called masking.  You can view masking as using secret sharing techniques to split up all intermediate computation into independent operations.  To defeat masking an attacker needs to be able to re-combine the data dependent information leakage associated with all the split components.  This is always a possibility.&lt;p&gt;Thus it becomes a risk&amp;#x2F;cost tradeoff.  The more you mask, the more secure you become, but at a cost of speed&amp;#x2F;area&amp;#x2F;power draw.&lt;p&gt;(+) It&amp;#x27;s decidedly non-trivial to implement a masking scheme such that you get the theoretical security.  This is an active research area.</text></comment>
<story><title>Tempest attacks against AES: Stealing keys using minimal equipment [pdf]</title><url>https://www.fox-it.com/nl/wp-content/uploads/sites/12/Tempest_attacks_against_AES.pdf</url></story><parent_chain><item><author>wizeman</author><text>Are there any modern crypto algorithms that are, by design, immune from an attack such as this? Would not having any key-dependent code paths be sufficient to prevent this attack?&lt;p&gt;If it is possible to be immune by design to power analysis, timing and tempest attacks, is there a list of such algorithms somewhere that I can look it up? My google-fu hasn&amp;#x27;t returned anything useful.</text></item></parent_chain><comment><author>technion</author><text>Chacha20 was designed to be immune to timing attacks. It&amp;#x27;s discussed on page three:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;datatracker.ietf.org&amp;#x2F;doc&amp;#x2F;html&amp;#x2F;draft-irtf-cfrg-chacha20-poly1305-10&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;datatracker.ietf.org&amp;#x2F;doc&amp;#x2F;html&amp;#x2F;draft-irtf-cfrg-chacha...&lt;/a&gt;</text></comment>