286: Twenty Cans of Gas
Colin O'Flynn, CTO of NewAE Technology and an assistant professor at Dalhousie University, explains how his ChipWhisperer platform enables side-channel power analysis and fault injection attacks to recover encryption keys from embedded devices. He details the mechanics of differential power analysis, noting that power consumption correlates with data bus activity, allowing attackers to iteratively recover secret keys from algorithms like AES. O'Flynn discusses the ethical implications of open-source security tools, arguing that making these attacks accessible helps designers implement better countermeasures like masking and key rotation before products reach the market. He also covers his work with FPGAs for precise timing control in attacks and his hiring needs for embedded security experts at his company.