Side-Channel
Side-Channel Attack
Seitenkanalangriff
A side-channel attack obtains secret information not by breaking a method but by observing its physical side effects — such as power consumption, timing, electromagnetic emanation or cache behaviour. Instead of cracking the lock, the attacker listens to its sounds. Such attacks are subtle and often hard to defend against.
History & facts. Even a mathematically secure method reveals physical traces when executed: how long a calculation takes or how much power it draws can depend on the secret values processed. Attacks also became known that exploit peculiarities of modern processors (such as speculative execution and cache behaviour) to read out actually isolated data. Common to these attacks is that they target the implementation and the hardware, not the algorithm.
Outlook & recommendation. Defence takes place above all at the implementation and hardware level: constant-time methods, avoiding data-dependent branches, masking and applying corresponding microcode and operating system updates. For most organisations, side-channel attacks are less an everyday than a high-security topic (such as with smart cards or shared cloud hardware), yet the consistent patching of processor-level vulnerabilities nonetheless belongs in the mandatory domain.