Abstract:Persistent Fault Analysis (PFA) is a powerful analysis technique proposed in CHES 2018, which utilizes those faults that are injected before execution and persist throughout the encryption. However, when it is applied to the block cipher which has multiple S-boxes, the key can not be recovered in just one attack. The adversary has to conduct the fault attack several times and inject faults into all the distinct S-boxes. In this paper, we propose Key Schedule Guided Persistent Fault Attack (KGPFA), which utilizes the key schedule to guide the fault injection and fault analysis. By analyzing the key schedule, KGPFA exploits the relations between the key leakages caused by the same faulty S-box in various rounds. It can reduce the number of attacks and the number of faults required to recover the key. Our major contributions are twofold. Firstly, in the fault injection step, we provide Key Schedule Guided Persistent Fault Injection (KGPFI) strategies to reduce the number of attacks and the number of faults under the assumption of both ciphertext-only and known-plaintext attacks. Secondly, in the fault analysis step, as our target ciphers are Feistel-based, we propose the Ineffective Algebraic Persistent Fault Analysis (IAPFA) to extend the usage of Algebraic Persistent Fault Analysis (APFA) in the ineffective persistent fault setting. To demonstrate the effectiveness of our technique, we apply KGPFA to four widely used block ciphers with multiple S-boxes, DES, 3DES, LBlock, and Camellia. In our experiment, in the ciphertext-only attack, the key of DES can be recovered with 300 ineffective ciphertexts (coresponding to 827 ciphertexts) and four faulty S-boxes within 12.18min. Under the assumption of known-plaintext, the key of DES is recovered within two faulty S-boxes in 2.34h. For LBlock, the key is recovered with two faulty S-boxes and 100 ineffective ciphertexts (coresponding to 6211 ciphertexts) in 1.16min.

Fault-propagate Pattern Based DFA on PRESENT and PRINTcipher

Double Laser-Faults Based PFA on Cryptographic Circuits with Algebraic Analysis

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

Key Schedule Guided Persistent Fault Attack

Improvement and Evaluation for Algebraic Fault Attacks on PRESENT

Pushing the Limit of PFA: Enhanced Persistent Fault Analysis on Block Ciphers

Free Fault Leakages for Deep Exploitation: Algebraic Persistent Fault Analysis on Lightweight Block Ciphers.

A Comprehensive Study of Algebraic Fault Analysis on PRINCE

Efficient Persistent Fault Analysis with Small Number of Chosen Plaintexts

Improvements and recent updates of persistent fault analysis on block ciphers

Improved Differential Fault Analysis on LED with Constraint Equations: Towards Reaching Its Limit

Improving DFA on AES using all-fault ciphertexts

Differential Fault Analysis on 3DES Middle Rounds Based on Error Propagation

Persistent Fault Attack in Practice

Improving DFA Attacks on AES with Unknown and Random Faults

Automatic Search of Meet-in-the-Middle Differential Fault Analysis on AES-like Ciphers.

RAFA: Redundancies-assisted Algebraic Fault Analysis and its implementation on SPN block ciphers.

A Framework for the Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

A Fast-Detection and Fault-Correction Algorithm Against Persistent Fault Attack

Improving and Evaluating Differential Fault Analysis on LED with Algebraic Techniques

FaultMorse: an Automated Controlled-Channel Attack Via Longest Recurring Sequence