Abstract:Algebraic side-channel attack (ASCA) is a typical technique that relies on a general solver to solve the equations of a cipher and its side-channel leaks. It falls under analytical side-channel attack and can recover the entire key at once. Many ASCAs are proposed against the AES, and they utilize the Grobner basis-based, SAT-based, or optimizer-based solver. The advantage of the general solver approach is its generic feature, which can be easily applied to different cryptographic algorithms. The disadvantage is that it is difficult to take into account the specialized properties of the targeted cryptographic algorithms. The results vary depending on what type of solver is used, and the time complexity is quite high when considering the error-tolerant attack scenarios. Thus, we were motivated to find a new approach that would lessen the influence of the general solver and reduce the time complexity of ASCA. This paper proposes a new analytical side-channel attack on AES by exploiting the incomplete diffusion feature in one AES round. We named our technique incomplete diffusion analytical side-channel analysis (IDASCA). Different from previous ASCAs, IDASCA adopts a specialized approach to recover the secret key of AES instead of the general solver. Extensive attacks are performed against the software implementation of AES on an 8-bit microcontroller. Experimental results show that: 1) IDASCA can exploit the side-channel leaks in all AES rounds using a single power trace; 2) it has less time complexity and more robustness than previous ASCAs, especially when considering the error-tolerant attack scenarios; and 3) it can calculate the reduced key search space of AES for the given amount of side-channel leaks. IDASCA can also interpret the mechanism behind previous ASCAs on AES from a quantitative perspective, such as why ASCA can work under unknown plaintext/ciphertext scenarios and what are the extreme cases in ASCAs.

A Power Analysis System for Cryptographic Devices

Design and implementation of a Differential Power Analysis System for cryptographic devices

Power Analysis Based Side Channel Attack

A Power Analysis Attack Countermeasure Based on Random Data Path Execution for CGRA.

Distributed power analysis attack on SM4 encryption chip

Power Supply Noise Aware Evaluation Framework for Side Channel Attacks and Countermeasures

A Countermeasure For Power Analysis To Scalar Multiplication Of Ecc Hardware

RTL-PSC: Automated Power Side-Channel Leakage Assessment at Register-Transfer Level

Cognitive Artificial Intelligence Countermeasure for Enhancing the Security of Big Data Hardware from Power Analysis Attack

Side-Channel Information Leakage Analysis And Countermeasures In An Embedded Cpu Microarchitecture

Exploiting the Incomplete Diffusion Feature: A Specialized Analytical Side-Channel Attack Against the Aes and Its Application to Microcontroller Implementations

An AES Chip with DPA Resistance Using Hardware-Based Random Order Execution

Differential Power Attack on SM4 Block Cipher

Efficient Hamming weight-based side-channel cube attacks on PRESENT

Power Side Channels in Security ICs: Hardware Countermeasures

Power Analysis Attacks on ECC Randomized Automata

A Short-Time Three-Phase Single-Rail Precharge Logic Against Differential Power Analysis

An Improved Empirical Mode Decomposition for Power Analysis Attack

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2

A Novel Method of Correlation Power Analysis on SM4 Hardware Implementation

Software Hardware Co-design for Side-Channel Analysis Platform on Security Chips.