Abstract:Algebraic side-channel attack (ASCA) is a typical technique that relies on a general solver to solve the equations of a cipher and its side-channel leaks. It falls under analytical side-channel attack and can recover the entire key at once. Many ASCAs are proposed against the AES, and they utilize the Grobner basis-based, SAT-based, or optimizer-based solver. The advantage of the general solver approach is its generic feature, which can be easily applied to different cryptographic algorithms. The disadvantage is that it is difficult to take into account the specialized properties of the targeted cryptographic algorithms. The results vary depending on what type of solver is used, and the time complexity is quite high when considering the error-tolerant attack scenarios. Thus, we were motivated to find a new approach that would lessen the influence of the general solver and reduce the time complexity of ASCA. This paper proposes a new analytical side-channel attack on AES by exploiting the incomplete diffusion feature in one AES round. We named our technique incomplete diffusion analytical side-channel analysis (IDASCA). Different from previous ASCAs, IDASCA adopts a specialized approach to recover the secret key of AES instead of the general solver. Extensive attacks are performed against the software implementation of AES on an 8-bit microcontroller. Experimental results show that: 1) IDASCA can exploit the side-channel leaks in all AES rounds using a single power trace; 2) it has less time complexity and more robustness than previous ASCAs, especially when considering the error-tolerant attack scenarios; and 3) it can calculate the reduced key search space of AES for the given amount of side-channel leaks. IDASCA can also interpret the mechanism behind previous ASCAs on AES from a quantitative perspective, such as why ASCA can work under unknown plaintext/ciphertext scenarios and what are the extreme cases in ASCAs.

An Improved Automatic Search Method for Differential Trails in TEA Cipher.

Towards non-independence of modular additions in searching differential trails of ARX ciphers: new automatic methods with application to SPECK and Chaskey

SAT-Based Automatic Searching for Differential and Linear Trails: Applying to CRAX

Differential-Linear Approximation Semi-unconstrained Searching and Partition Tree: Application to LEA and Speck

Speeding Up The Search Algorithm For The Best Differential And Best Linear Trails

Optimised the Differential Trail of the Authenticated Encryption Algorithm Tiaoxin-346

Automatic Search of Linear Trails in ARX with Applications to SPECK and Chaskey.

New Techniques for Searching Differential Trails in Keccak

Unveiling the Neutral Difference and Its Automated Search

New Automatic Tool for Finding Impossible Differentials and Zero-Correlation Linear Approximations

Rotational-XOR Differential Cryptanalysis and an Automatic Framework for AND-RX Ciphers

Automatic Search of Meet-in-the-Middle Differential Fault Analysis on AES-like Ciphers.

A Comprehensive Study of Multiple Deductions-Based Algebraic Trace Driven Cache Attacks on Aes

Automatic Search of Differential Characteristics and Improved Differential Cryptanalysis for PRINCE, QARMA, and MANTIS

A Quantum Automatic Tool for Finding Impossible Differentials

Automatic Search for Related-Key Differential Trails in SIMON-like Block Ciphers Based on MILP

Exploiting the Incomplete Diffusion Feature: A Specialized Analytical Side-Channel Attack Against the Aes and Its Application to Microcontroller Implementations

Meet-in-the-Middle Technique for Truncated Differential and Its Applications to CLEFIA and Camellia

AlgSAT—A SAT Method for Verification of Differential Trails from an Algebraic Perspective

The Exchange Attack and the Mixture Differential Attack Revisited: From the Perspective of Automatic Evaluation

Improved Automatic Search of Impossible Differentials for Camellia with FL/FL−1 Layers