bugtraq - RE: unix entropy source can be used for keystroke timing attacks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <871080DEC5874D41B4E3AFC5C400611E06B47659@UTDEVS02.campus.ad.utdallas.edu>
Date: Fri, 15 Aug 2003 00:33:44 -0500
From: "Schmehl, Paul L" <pauls@...allas.edu>
To: "Michal Zalewski" <lcamtuf@...ttot.org>, <vulnwatch@...nwatch.org>,
   <bugtraq@...urityfocus.com>
Cc: <full-disclosure@...sys.com>
Subject: RE: unix entropy source can be used for keystroke timing attacks

> -----Original Message-----
> From: Michal Zalewski [mailto:lcamtuf@...ttot.org] 
> Sent: Thursday, August 14, 2003 6:04 PM
> To: vulnwatch@...nwatch.org; bugtraq@...urityfocus.com
> Cc: full-disclosure@...sys.com
> Subject: [Full-Disclosure] unix entropy source can be used 
> for keystroke timing attacks
> 
> Another bizarre vulnerability, for your amusement...
> 
Indeed.  Where do you come up with this stuff?

> Several unix systems systems provide a secure entropy source 
> maintained by collecting certain information that is supposed 
> to be practically unpredictable (such as interrupt timings, 
> keyboard scancodes or device request times), then running it 
> thru one-way hashing function (SHA1 or MD5).
> 
> A device called /dev/random estimates the amount of entropy 
> available in the entropy pool, and blocks on read when the 
> pool gets empty. This continues until the buffer is seeded 
> with some new data due to one of the events mentioned.

When I read this, I immediately thought of some work that I did back in
the 60's.  Without giving too much away, it is possible to monitor sound
patterns in such a way that you can *uniquely* identify moving objects.
(Think of looking for unique "noise" frequencies in the full spectrum of
random noise, such as the sound of a motor.)

The corollary is that you could uniquely monitor /dev/random access to
do the same thing.  All you need is something that records all the
"traffic" and then analyzes it for patterns.   Controlled research would
identify what each pattern signified, and within a reasonable amount of
time you might even be able to identify machine operators simply by the
pattern of their keystrokes.  From there, capturing *what* their typing
is a matter of relative ease.

Very interesting indeed.

Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html