I'd like to focus on the "acoustic emanations" part. What's up with that? Remember Van Eck phreaking? Theoretically possible but only good for fiction writing in reality. <div><br></div><div>-lee<br><br>On Wednesday, December 18, 2013, Nathan of Guardian wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
>From GnuPG:<br>
<a href="http://lists.gnupg.org/pipermail/gnupg-devel/2013-December/028102.html" target="_blank">http://lists.gnupg.org/pipermail/gnupg-devel/2013-December/028102.html</a><br>
<br>
"The second attack is more serious. Â It is an adaptive chosen ciphertext<br>
attack to reveal the private key. Â A possible scenario is that the<br>
attacker places a sensor (for example a standard smartphone) in the<br>
vicinity of the targeted machine. Â That machine is assumed to do<br>
unattended RSA decryption of received mails, for example by using a mail<br>
client which speeds up browsing by opportunistically decrypting mails<br>
expected to be read soon. Â While listening to the acoustic emanations of<br>
the targeted machine, the smartphone will send new encrypted messages to<br>
that machine and re-construct the private key bit by bit. Â A 4096 bit<br>
RSA key used on a laptop can be revealed within an hour."<br>
_______________________________________________<br>
Guardian-dev mailing list<br>
<br>
Post: <a href="javascript:;" onclick="_e(event, 'cvml', 'Guardian-dev@lists.mayfirst.org')">Guardian-dev@lists.mayfirst.org</a><br>
List info: <a href="https://lists.mayfirst.org/mailman/listinfo/guardian-dev" target="_blank">https://lists.mayfirst.org/mailman/listinfo/guardian-dev</a><br>
<br>
To Unsubscribe<br>
    Send email to:  <a href="javascript:;" onclick="_e(event, 'cvml', 'Guardian-dev-unsubscribe@lists.mayfirst.org')">Guardian-dev-unsubscribe@lists.mayfirst.org</a><br>
    Or visit: <a href="https://lists.mayfirst.org/mailman/options/guardian-dev/lee%40guardianproject.info" target="_blank">https://lists.mayfirst.org/mailman/options/guardian-dev/lee%40guardianproject.info</a><br>
<br>
You are subscribed as: <a href="javascript:;" onclick="_e(event, 'cvml', 'lee@guardianproject.info')">lee@guardianproject.info</a><br>
</blockquote></div>