# Recovering AES Keys with a Deep Cold Boot Attack

arXiv: https://arxiv.org/abs/2106.04876 · HTML: https://mlsanity.com/paper/2106.04876/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Builds on 10 of its 50 references that are in the map.
- First posted on arXiv 9 Jun 2021.

## Builds on (most cited first, 10 of 10)

- [Adam: A Method for Stochastic Optimization](https://mlsanity.com/paper/1412.6980/) (2014)
- [Learning to Decode Linear Codes Using Deep Learning](https://mlsanity.com/paper/1607.04793/) (2016)
- [Turbo Autoencoder: Deep learning based channel codes for point-to-point communication channels](https://mlsanity.com/paper/1911.03038/) (2019)
- [Communication Algorithms via Deep Learning](https://mlsanity.com/paper/1805.09317/) (2018)
- [Deepcode: Feedback Codes via Deep Learning](https://mlsanity.com/paper/1807.00801/) (2018)
- [Hyper-Graph-Network Decoders for Block Codes](https://mlsanity.com/paper/1909.09036/) (2019)
- [DeepSIC: Deep Soft Interference Cancellation for Multiuser MIMO Detection](https://mlsanity.com/paper/2002.03214/) (2020)
- [Unsupervised Linear and Nonlinear Channel Equalization and Decoding using Variational Autoencoders](https://mlsanity.com/paper/1905.08795/) (2019)
- [Low-complexity Recurrent Neural Network-based Polar Decoder with Weight Quantization Mechanism](https://mlsanity.com/paper/1810.12154/) (2018)
- [A Survey of Electromagnetic Side-Channel Attacks and Discussion on their Case-Progressing Potential for Digital Forensics](https://mlsanity.com/paper/1903.07703/) (2019)

## Abstract (arXiv)

Cold boot attacks inspect the corrupted random access memory soon after the power has been shut down. While most of the bits have been corrupted, many bits, at random locations, have not. Since the keys in many encryption schemes are being expanded in memory into longer keys with fixed redundancies, the keys can often be restored. In this work, we combine a novel cryptographic variant of a deep error correcting code technique with a modified SAT solver scheme to apply the attack on AES keys. Even though AES consists of Rijndael S-box elements, that are specifically designed to be resistant to linear and differential cryptanalysis, our method provides a novel formalization of the AES key scheduling as a computational graph, which is implemented by a neural message passing network. Our results show that our methods outperform the state of the art attack methods by a very large margin.