Abstract:Mathematically secure cryptographic algorithms, when implemented on a physical substrate, leak critical “side-channel” information, leading to power and electromagnetic (EM) analysis attacks. Circuit-level protections involve switched capacitor, buck converter, or series low-dropout (LDO) regulator-based implementations, each of which suffers from significant power, area, or performance tradeoffs and has only achieved a minimum traces to disclosure (MTD) of <inline-formula> <tex-math notation="LaTeX">$10M$ </tex-math></inline-formula> till date. Utilizing an in-depth white-box model, this work, for the first time, focuses on signature suppression in the current domain, which provides an <inline-formula> <tex-math notation="LaTeX">$Attenuation^{2}$ </tex-math></inline-formula> enhancement in MTD, leading to orders of magnitude improvement in both power and EM side-channel analysis (SCA) immunities. Using a combination of current-domain “signature attenuation” (CDSA) along with local lower level metal routing, the critical correlated information in the crypto current is significantly suppressed before it reaches the supply pin. Especially, to prevent the EM leakage from its source (metal layers carrying the correlated crypto current acting as antennas), this work embraces lower level metal routing of the CDSA embedding the crypto-IP so that the signature becomes highly suppressed before it passes through the higher metal layers (which radiates significantly) to connect to the external pin. The 65-nm CMOS test chip contains both protected and unprotected parallel AES-256 implementations, running at a clock frequency of 50 MHz. Test vector leakage assessment (TVLA) on the protected CDSA-AES, demonstrated with on-chip measurements for the first time, shows that the higher level metal layers leak significantly more compared with the lower level metal routing. Correlational power and EM analysis (CPA/CEMA) attacks on the unprotected implementation were able to extract the secret key within <inline-formula> <tex-math notation="LaTeX">$8k$ </tex-math></inline-formula> and <inline-formula> <tex-math notation="LaTeX">$12k$ </tex-math></inline-formula> traces, respectively, while the protected CDSA-AES could not be broken even after <inline-formula> <tex-math notation="LaTeX">$1B$ </tex-math></inline-formula> encryptions for both power and EM SCA, evaluated both in the time and frequency domains, showing an improvement of <inline-formula> <tex-math notation="LaTeX">$100\times $ </tex-math></inline-formula> over the prior state-of-the-art countermeasures with comparable power and area overheads.

A Standard Cell-Based Leakage Power Analysis Attack Countermeasure Using Symmetric Dual-Rail Logic

Employing Symmetric Dual-Rail Logic to Thwart LPA Attack

Counteracting leakage power analysis attack using random ring oscillators

Analysis of Two Different Logic Styles Against DPA Attacks

Research on Circuit Level Countermeasures for Differential Power Analysis Attacks

A Refined Simple Power Analysis Attack on Ecc with Countermeasures

Power Side Channels in Security ICs: Hardware Countermeasures

A Short-Time Three-Phase Single-Rail Precharge Logic Against Differential Power Analysis

Dynamic Current Mode Logic Based Flip-Flop Design for Robust and Low-Power Security Integrated Circuits

An Efficient Window-Based Countermeasure to Power Analysis of ECC Algorithms

Dual-rail random switching logic: a countermeasure to reduce side channel leakage

Design and Evaluation of Fluctuating Power Logic to Mitigate Power Analysis at the Cell Level

Modeling and Analyzing the Power Analysis Attacks Against AES

Dual-Rail Precharge Logic-Based Side-Channel Countermeasure for DNN Systolic Array

Making Register File Resistant to Power Analysis Attacks.

Implementation of power attack analysis in ML algorithm circuit with elliptic curve cryptosystems

On the Layout-Oriented Investigation of Power Attack Hardness of Spintronic-Based Logic Circuits

EM and Power SCA-Resilient AES-256 Through >350× Current-Domain Signature Attenuation and Local Lower Metal Routing

A Combinational Power Analysis Method Against Cryptographic Hardware

A Dual-Voltage Single-Rail Dynamic Dpa-Resistant Logic Based on Charge Sharing Mechanism

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2