Abstract:Persistent Fault Analysis (PFA) is a powerful analysis technique proposed in CHES 2018, which utilizes those faults that are injected before execution and persist throughout the encryption. However, when it is applied to the block cipher which has multiple S-boxes, the key can not be recovered in just one attack. The adversary has to conduct the fault attack several times and inject faults into all the distinct S-boxes. In this paper, we propose Key Schedule Guided Persistent Fault Attack (KGPFA), which utilizes the key schedule to guide the fault injection and fault analysis. By analyzing the key schedule, KGPFA exploits the relations between the key leakages caused by the same faulty S-box in various rounds. It can reduce the number of attacks and the number of faults required to recover the key. Our major contributions are twofold. Firstly, in the fault injection step, we provide Key Schedule Guided Persistent Fault Injection (KGPFI) strategies to reduce the number of attacks and the number of faults under the assumption of both ciphertext-only and known-plaintext attacks. Secondly, in the fault analysis step, as our target ciphers are Feistel-based, we propose the Ineffective Algebraic Persistent Fault Analysis (IAPFA) to extend the usage of Algebraic Persistent Fault Analysis (APFA) in the ineffective persistent fault setting. To demonstrate the effectiveness of our technique, we apply KGPFA to four widely used block ciphers with multiple S-boxes, DES, 3DES, LBlock, and Camellia. In our experiment, in the ciphertext-only attack, the key of DES can be recovered with 300 ineffective ciphertexts (coresponding to 827 ciphertexts) and four faulty S-boxes within 12.18min. Under the assumption of known-plaintext, the key of DES is recovered within two faulty S-boxes in 2.34h. For LBlock, the key is recovered with two faulty S-boxes and 100 ineffective ciphertexts (coresponding to 6211 ciphertexts) in 1.16min.

Differential Fault Attack on Kasumi Cipher Used in Gsm Telephony

Improved Cryptanalysis of the Block Cipher KASUMI

An Extension of Differential Fault Analysis on SMS4

Differential Fault Analysis on the SMS4 Cipher by Inducing Faults to the Key Schedule

Differential Power Analysis Attack on SMS4 Block Cipher

Research on Differential Power Analysis Attack on SMS4 Algorithm

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Fault-cube attack on SIMON family of lightweight block ciphers

Differential Fault Analysis on Camellia.

Automatic Search of Meet-in-the-Middle Differential Fault Analysis on AES-like Ciphers.

Securing SMS4 cipher against differential power analysis and its VLSI implementation

Differential fault analysis on the contracting UFN structure, with application to SMS4 and MacGuffin

Stealthy Hardware Trojan Based Algebraic Fault Analysis of HIGHT Block Cipher.

Fault Attack on the Authenticated Cipher ACORN V2.

Analysis Of The Sms4 Block Cipher

Fault-based guess-and-determine attack on SOSEMANUK

Algebraic Fault Analysis on GOST for Key Recovery and Reverse Engineering

Key Schedule Guided Persistent Fault Attack

New Practical Attacks on GEA-1 Based on a New-Found Weakness

Differential fault analysis on the ARIA algorithm

Side-Channel Analysis for the Authentication Protocols of CDMA Cellular Networks