NEW YORK — What happened: A collective of academic security researchers released an exhaustive audit revealing persistent side-channel vulnerabilities inside the hardware secure enclaves of popular mobile and desktop system-on-chips.
Why it matters: Secure enclaves are designed to be the ultimate vault for sensitive data, such as biometric credentials and cryptographic keys. Proving they remain vulnerable to power-analysis attacks challenges assumptions about hardware-level isolation.
Deep dive: The attack measures micro-fluctuations in electrical current drawn by the processor core while it performs cryptographic operations. By correlating power consumption patterns with execution time, researchers successfully reconstructed 256-bit encryption keys within minutes of physical access.
Report check: Social media posts alleged that remote hackers could drain bank accounts via malware that measures power use over the internet. The verified report strictly requires physical access to the device or a compromised shared motherboard component.
Open questions: Can silicon designers patch these physical side-channel vectors in existing hardware revisions via microcode, or will mitigation require entirely new silicon manufacturing geometries?