ZeroHour

Search: “side-channel”

2 stories in the last 24h

s-MDM: Generative Virtualization of Multi-Device Hardware Variations for Portable DL-SCA

Researchers present s-MDM, a generative framework synthesizing virtual device profiles to improve cross-device portability of deep learning side-channel analysis.

The poster introduces the Synthetic Multiple Device Model (s-MDM), a zero-target-trace generative framework addressing performance degradation of deep learning side-channel analysis on unseen hardware. It combines a structured cVAE generator, Walsh-Hadamard leakage anchors, continuous style modulation, and decoupled leakage-style-domain critics to synthesize virtual source-device profiles offline. Benchmarked on 32-bit AES_PTv2 traces, s-MDM achieves consistently low key rank on layout- and acquisition-shifted Pinata targets where physical baselines are unstable.

arXiv cs.CR · 14h agoResearch

USN-8776-1: python-cryptography vulnerabilities

Ubuntu patches python-cryptography flaws including a PKCS#7 timing side-channel (CVE-2026-69247) that could allow key recovery.

Ubuntu Security Notice USN-8776-1 fixes multiple vulnerabilities in python-cryptography. CVE-2026-69247 describes distinguishable PKCS#7 decryption outcomes with observable timing differences that a remote attacker could exploit to recover encryption keys; it affects Ubuntu 26.04 LTS. CVE-2023-23931, affecting only Ubuntu 18.04 LTS, involves incorrect handling of objects with immutable buffers during cipher operations, causing corrupted output, and a third issue reported by Jack Lloyd is also addressed.