Abstract:Algebraic fault analysis (AFA), which combines algebraic cryptanalysis with fault attacks, has represented serious threats to the security of lightweight block ciphers. Inspired by an earlier framework for the analysis of side-channel attacks presented at EUROCRYPT 2009, a new generic framework is proposed to analyze and evaluate algebraic fault attacks on lightweight block ciphers. We interpret AFA at three levels: 1) the target; 2) the adversary; and 3) the evaluator. We describe the capability of an adversary in four parts: 1) the fault injector; 2) the fault model describer; 3) the cipher describer; and 4) the machine solver. A formal fault model is provided to cover most of current fault attacks. Different strategies of building optimal equation set are also provided to accelerate the solving process. At the evaluator level, we consider the approximate information metric and the actual security metric. These metrics can be used to guide adversaries, cipher designers, and industrial engineers. To verify the feasibility of the proposed framework, we make a comprehensive study of AFA on an ultra-lightweight block cipher called LBlock. Three scenarios are exploited, which include injecting a fault to encryption, to key scheduling, or modifying the round number or counter. Our best results show that a single fault injection is enough to recover the master key of LBlock within the affordable complexity in each scenario. To verify the generic feature of the proposed framework, we apply AFA to three other block ciphers, i.e., Data Encryption Standard, PRESENT, and Twofish. The results demonstrate that our framework can be used for different ciphers with different structures.

Advanced Slide Attacks on the Even-Mansour Scheme.

Design of chaotic output-cipher feedback stream cryptosystems

MB+: Enhanced Multibridge Attack for Even-Mansour Schemes

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

A Framework for the Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Side-Channel Cube Attacks on EPCBC

Power Analysis Attacks on ECC Randomized Automata

Quantum Attacks on 1K-AES and PRINCE

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

New Attacks on Randomized ECC Algorithms

Efficient Hamming weight-based side-channel cube attacks on PRESENT

An Automated Framework for Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

Attacks on the (enhanced) Yang-Shieh Authentication

Quantum Query Lower Bounds for Key Recovery Attacks on the Even-Mansour Cipher

Breaking the Symmetry: a Way to Resist the New Differential Attack.

A New Template Attack Method of Advanced Encryption Standard

New Representations of the AES Key Schedule

Quantum attacks on some feistel block ciphers

Improved Single-Key Attacks on 9-Round AES-192/256.

Enhanced Differential Cache Attacks on SM4 with Algebraic Analysis and Error-Tolerance