Researchers show how side-channel attacks can be used to steal encryption keys on Amazon's cloud servers

Researchers at Worcester Polytechnic Institute (WPI) have demonstrated that RSA encryption keys, which are used by thousands of companies and organizations to protect the data and processes they entrust to cloud-based services, can be obtained using a sophisticated side-channel attack—despite recent efforts by cloud service providers and cryptography software developers to eliminate such vulnerabilities.