Screaming Channels - When Electromagnetic Side Channels Meet Radio Transceivers

Explore the intersection of electromagnetic side channels and radio transceivers in this Black Hat conference talk. Delve into novel side-channel attacks that can compromise cryptography in mixed-design chips over significant distances. Learn about leaks in radio signals, electromagnetic side-channels, correlation attack basics, and modulation fundamentals. Discover the challenges posed by noise in mixed-signal chips and follow the journey of leak discovery. Examine the logic transmission scheme, extraction and alignment techniques, and the evolution of attacks. Discuss potential impacts and countermeasures against these vulnerabilities. Gain insights into the concept of "Screaming Channels" and consider the implications of frequency hopping in this context.

Intro
Leaks in radio signals
Side channel basics
Electromagnetic Side-Channels
Correlation attack basics
A Simple Wave
Modulation Basics
Mixed-signal chips
A big problem: Noise
So the journey begins...
Discovery of a leak
black hat Logic Transmission Scheme
Conventional
Extraction and alignment
Attacking
Evolution of the attack
Impact
Countermeasures
Screaming Channels: The Sound Bytes
What about hopping?