NSA Releases Historical Documents on TEMPEST 121
sgunhouse writes to mention Wired's Threat Level has a piece on a recently-declassified document detailing the history of TEMPEST. "It was 1943, and an engineer with Bell Telephone was working on one of the U.S. government's most sensitive and important pieces of wartime machinery, a Bell Telephone model 131-B2. It was a top secret encrypted teletype terminal used by the Army and Navy to transmit wartime communications that could defy German and Japanese cryptanalysis. Then he noticed something odd. Far across the lab, a freestanding oscilloscope had developed a habit of spiking every time the teletype encrypted a letter. Upon closer inspection, the spikes could actually be translated into the plain message the machine was processing. Though he likely didn't know it at the time, the engineer had just discovered that all information processing machines send their secrets into the electromagnetic ether."
This is gonna be interesting. (Score:5, Interesting)
Re: (Score:2, Funny)
Re: (Score:2)
Re: (Score:2)
Maybe the silliest consequence? (Score:3, Interesting)
Re:Maybe the silliest consequence? (Score:4, Interesting)
Unless you are using a fiber optic cable with a transparent sheath [flickr.com], there shouldn't be any kind of detectable emissions from a fiber optic cable, especially not EMF, since there shouldn't be any moving electric current, right?
The line might heat up very slightly from the signal losses, but that wouldn't be rapid enough to reveal anything useful about the signal, especially if manchester encoding [wikipedia.org] is used, where the light would be on 50% of the time.
Re: (Score:1)
Re: (Score:2)
sniffing fiber by bending to allow leaks has been a commercial possibility for at least the last 10 years, so i doubt very much they are mearly "trying" to reveal signal.
I recall seeing an all in one fibre/bending/sniffing device for about $500 bucks and that was a few years ago.
the
Re: (Score:2)
Re: (Score:2)
Unless you are using a fiber optic cable with a transparent sheath, there shouldn't be any kind of detectable emissions from a fiber optic cable, especially not EMF, since there shouldn't be any moving electric current, right?
Well, that's one possibility. What if photons create, instead of an electrical field, some other type (gravitational?) and we just haven't noticed yet because the interaction is so minor and nothing "tuned" to its wavelength has produced an accidental discovery like this one?
Actually, this effect was exploited in ignition coils before this, so I think that saying that he made the discovery is a bit disingenuous. It's more that he had discovered something new to do with it. If it hadn't happened then, we
Re: (Score:2)
One thing people fail to understand is that the cost of a system includes Design, Contruction and TEST. If the designer is smart he can greatly reduce the cost of the
Re: (Score:1)
Re: (Score:2)
Correct, but the switches at either end where the light signals are converted back into electrical signals are a very real souce of emissions.
Re: (Score:2)
Unless you are using a fiber optic cable with a transparent sheath [flickr.com], there shouldn't be any kind of detectable emissions from a fiber optic cable
Re: (Score:1)
One fiber with photons travelling through it placed next to an empty fiber will generate photonic energy in the empty fiber that matches the phase/frequency/modulation of the original signal. The length of the section of the fibers next to each other determines the percentage of energy transferred. This is how optical couplers/spli
Re: (Score:1)
Re: (Score:2)
Re: (Score:1, Funny)
__t ___e ____ _r________, ____ ___r_____ ______ ____ _o ____ __ ___ __ ________ _r__ _ __i_ __s__ t__ computer, right? I mean in modern times, we don't really have to worry about this at all, right? Cuz there's so much else being processed and sent down a bus by the processor that you'd never pick out the data accurately, and probably not from more than a millimeter away.
Sir he just sent a secret message to Mr. Slas H Dot again. TEMPEST couldn't make it all out but it should be enough to indite.
Re: (Score:3, Insightful)
The NSA is the number one employer of mathematicians in the USA. The Russians are also supposed to be very good. If there is a way to extract intelligence from the noise, they probably know about it. If it's electrical, it radiates. If it radiates, someone else can detect it. If the signal is weak, they can build a better antenna, design a more sensitive receiver, and use more sophisticated signal processing.
Look at your average PC. The keyboard and display are broadcasting tons of inf
Re: (Score:2)
Re: (Score:2)
oblig (Score:1, Funny)
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
From this page [google.com] of Cryptonomicon.
just as oblig (Score:2)
Saw this a few days ago (Score:4, Interesting)
http://cryptome.org/ [cryptome.org]
nsa-spectrum.zip + Zipped NSA Cryptologic Spectrum Articles 1969-81 April 24, 2008 (31MB)
nsa-tempest.pdf + TEMPEST: A Signal Problem (NSA History) April 24, 2008
No direct link to save JY's bandwidth.
I love the simple solution
"Instead of buying this monster, the Signal Corps resorted to the only other solution they could think of. They went out and warned commanders of the problem, advised them to control a zone about 100 feet in diameter around their communications center to prevent covert interception, and let it go at that."
I am trying to get some time to get into the Spectrum articles.
Very cool (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
I guess that is why some of the offices.... (Score:2)
Re: (Score:3, Interesting)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
There are secure rooms like that at Lockheed. Except for one little detail... one day they noticed that vines were coming up around the border of wall and floor. Seems they'd lavished security on the walls and ceiling, but til the vines invaded, had totally forgotten about the floor!!
Re: (Score:2)
Get Your Tinfoil Hats (Score:2)
van Eck phreaking (Score:1)
Re: (Score:2)
TEMPEST (Score:2)
I found a java simulation here [hereinreality.com].
Tempest Room (Score:2)
After it was constructed I remember when it got tested and certified. The main bay was all metal walls and ceiling. If they found a tiny RF leak they'd spot weld over it When done the inside walls looked like a set from a
Something you can try at home... (Score:5, Interesting)
You're also going to need a portable black-and-white TV, a decent aerial, and maybe an aerial booster.
Testing is simple - put a recognisable image up on the screen. This can be the startup screen of an application, a directory listing, even an ASCII-art goatse if you're so inclined. The key is is *must* be a monochrome screen with pixels that are on or off - it won't work with greyscale. There's a subtle side-effect of this, which I'll come to in a moment.
Plug the aerial into the black and white TV. If you're more than a few feet away from the target computer, you're going to need the aerial. The signal you're trying to pick up is *tiny*. Tune the TV until you see what looks like a garbled version of the computer screen - an analogue tuner is best for this. The picture will be extremely weak and noisy, and it will also not be synchronised correctly. Now adjust the horizontal and vertical hold on the TV until you get a stable picture. You should at least be able to make out roughly what's on the screen.
To take it further, you need to break into the TV and add an AM radio. This detects the scanning coils in the monitor, and allows you to generate a sync pulse to lock the TV to the computer. You need to position the TV and AM radio very carefully so the radio isn't picking up the TV scan coils. This is the difficult bit, and in fact I've never got this part to work. I've got readable text off the computer screen before, from about 30 feet. I'd call that working.
Back to the greyscale thing briefly - antialiased fonts use grey pixels on either side of the black or white pixels to "blur" the edges and make the fonts look smoother. This has the effect of lowering the rise time of the signal, and thus not throwing as many harmonics out. Think about it - a switch from a black background to a white pixel is basically a squarewave, but if you step through a couple of shades of grey there's a much lower amplitude change and so the harmonics will be correspondingly quieter. So, anti-aliased fonts prevent Tempest-style attacks, and in fact about 15 years ago you could get "Tempest Fonts" that were basically very fuzzy antialiased fonts.
The other thing is that LCDs don't emit RF harmonics to nearly such an extent. The days of Tempest and Van Eck phreaking are pretty much gone.
TVs picking up Laptop Signals (Score:4, Interesting)
Since I'd done work with TEMPEST in the 1980s and was hanging out with a bunch of crypto people, and since the open-source discussions were mostly people saying "Laptops should protect you just fine since they're LCD", I obviously had to speculate about how this could be happening. My guess is that it wasn't the LCD itself that was radiating, but instead was the VGA jack on the back for plugging into a desktop monitor. Most laptops still have those today, and while many people use LCDs rather than CRTs as desktop monitors, they're still connecting by VGA signals using not-particularly-shielded cables, so there should still be plenty of signal around to listen for.
Obviously today's video signals are a lot higher frequency, so you'd need to use some actual computer equipment rather than squinting at a television. I don't know if the digital signal formats are easier or harder to intercept successfully than the VGA analog ones; maybe that'll help.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Increasing the rise time, actually.
They're very much alive, actually [cam.ac.uk] (8 MB PDF).
Re: (Score:2)
Slashdot sez LCD's can be eavesdropped on [slashdot.org] -- it's just more difficult. Still: from three offices away is not bad, given a $2000 instrumentation budget.
Galaxy Quest? (Score:2)
Re: (Score:1)
Tempest from CRTs (Score:1)
Not all machines... (Score:1)
Well, except for the abacus.
Re: (Score:2)
Re: (Score:2)
-dZ.
Re: (Score:2)
Re: (Score:2)
Re: (Score:1)
Seems to me that it is more a pile of well organized beads.
Apple ][+ and Tempest (Score:1)
Re: (Score:2)
Heh indeed. Most applications are indeed illegal, but imagine parking your van outside a bank and tuning in. Account numbers, passwords, all sorts of information.
On the governmental side, the stakes were much higher and therefore they got much more creative.
I'm getting a kick out of some of the posts.
OK, Great. (Score:1)
The world's first hacker (Score:2)
Presumably if he made the same discovery today (regarding the weakness of a secure communication) and told anyone about it, he'd be arrested, rather than have his work recognised as beneficial.
I guess that's progress for you
Re: (Score:2)
Successful TEMPEST exploit (Score:2)
Those were the days of corporate responsibility (Score:1)
"Bell Telephone faced a dilemma. They had sold the equipment to the military with the assurance that it was secure, but it wasn't. The only thing they could do was to tell the [U.S. Army] Signal Corps about it, which they did."
Can you imagine a Government contractor coming clean these days? You're more likely to get someone like Dick Jones from OCP:
"I had a guaranteed military sale with ED 209. A renovation program. Spare parts for years. Who cares if it worked or not?"
Re: (Score:1)
Plenty of people have terrible ethics and plenty of other people are horribly misguided or disinterested, but as sappy as it sounds, there are actually good people everywhere, working to make the world a better place.
I'd rather be lower middle class today than a king in any other period in history, only a megalomaniac would prefer to be a dir
"Wired" as a source of reliable info? (Score:2)
Electromagnetic leakage was well known by 1943. So well known that sinece the mid 1930's the Navy had required all receivers to be specially designed as to not leak out any spurious signals such as the local oscillator, BFO, or IF signals. Plentifully documented in the user and service manuals of said radios.
The scope "spiked" because the teletype needed a whopping 60 milliamps of signal current from a high-voltage current-limited sou
Re: (Score:2)
It was probably secure enough for 1960's era technology, but nowhere near good enough for today (as if there are any Teletypes running classified traffic anymore).
It's still a good idea to control the area outside your comm center out to 100 feet (or more). Prevents someone from walking up and planting a shaped charge on the outside wall.
Chip H.
Re: (Score:2)
The solution is the same for all the data paths.
Round off the spikes with a RC Low-Pass filter and/or shield the wires.
75-baud data does not radiate much with anything less than a quarter-wavelength of signal cable (about 22,00 miles)
One of the best video games ever made. (Score:2)
TI calculator LEDs (Score:2)
<graybeardmode>
Back in 1979 (IIRC), a college classmate and I discovered that our TI-55 [datamath.org] calculators would put out a blast of noise on the AM dial whenever something was written to the LED display! We tuned a nearby radio to the most effective frequency and started exploring.
Imagine our excitement when we discovered there was a different delay between bursts depending on how many LED segments were lit up! (That is, it took longer to display 88888888 than 11111111). Hey! We can make Music!! Fr
Re: (Score:2)
A friend had a HP-41C, and it could hold a lot more programming steps, but didn't make as quite as good a signal.
{nostalgia}
AM 1440 was the local rock station.
Chip H.
Re:ibm 1620 in late 60's (Score:1)
Ditto for other IBMs (Score:1)
Re: (Score:1)
Seismics (Score:1)
They do release a lot of interesting things though. I've been reading 'Spartans in Darkness', a well-written history of SIGINT in the Vietnam War, by an NSA historian.
http://www.fas.org/irp/nsa/spartans/index.html [fas.org]
Shipboard Tempest (Score:1)
Etheric Plastic? (Score:2)
Does that include my Dick Tracy secret decoder ring?
We've all heard stories of programming music on a radio from a Commodore PET, or reading the data by converting the flashes from a modem's transmit and receive LEDs, but I'm sure at the start of the electronics era (and especially in a crypto lab during a war) that the concept of being
Interesting... (Score:1)
British did this to the French (Score:2)
You Don't Know The Half Of It (Score:1)
The signal security guys went nuts, impossible, can't do it, too insecure. Our CG said go ahead and do it, prove you can
So we did. No problem with basically stock Apple II's, monitors, state of the art (then) commer
NSA''s tempest shielding (Score:1)
Seismics (Score:1)
Re: (Score:2)
A modern version could involve embedding a couple of microphones in a table top with associated processing. When someone lays a keyboard down an starts typing, the arrival time of each key click can be used to determine which key was pressed.
Other possibilities exist.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Mystery resume entries (Score:2)
Back in the late 80's I worked on some electronic key management stuff for the DoD. I was told I could put TEMPEST on my resume, but I was not allowed to tell anyone what it was. On can imagine the kind of odd job-interview situations this produces.
TEMPEST ratings classified (Score:1)
I don't think so... (Score:2)
An abacus doesn't: http://en.wikipedia.org/wiki/Abacus [wikipedia.org]
Nor does an old fashioned adding machine:
http://en.wikipedia.org/wiki/Adding_machine#Burroughs.27s_calculating_machine [wikipedia.org]
(Be sure to check out the image of the Burroughs adding machine near the bottom of the page.)
Nor a Manual Typewriter:
http://en.wikipedia.org/wiki/Typewriter [wikipedia.org]
(Be sure to check out the Hansen Writing Ball a little down on the left hand side... It will mak
Re: (Score:2)
Babbage's Difference Engine?
A slide rule?
Re: brain data an electromagnetic wave (Score:1)
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
The aliens know more than we do :-) (Score:1)
Re: (Score:2)