Abstract:<p>In the field of image recognition, machine learning technologies, especially deep learning, have been rapidly advancing alongside the advances of hardware such as GPUs. In image recognition, in general, large numbers of labeled images to be identified are input to a neural network, and repeatedly learning the images enables the neural network to identify objects with high accuracy. A new profiling side-channel attack method, the deep learning side-channel attack (DL-SCA), utilizes the neural network's high identifying ability to unveil a cryptographic module's secret key from side-channel information. In DL-SCAs, the neural network is trained with power waveforms captured from a target cryptographic module, and the trained network extracts the leaky part that depends on the secret. However, at this stage, the main target of investigation has been software implementation, and studies regarding hardware implementation, such as ASIC, are somewhat lacking. In this paper, we first depict deep learning techniques, profiling side-channel attacks, and leak models to clarify the relation between secret and side channels. Next, we investigate the use of DL-SCA against hardware implementations of AES and discuss the problem derived from the Hamming distance model and ShiftRow operation of AES. To solve the problem, we propose a new network training method called "mixed model dataset based on round-round XORed value." We prove that our proposal solves the problem and gives the attack capability to neural networks. We also compare the attack performance and characteristics of DL-SCA to conventional analysis methods such as correlation power analysis and conventional template attack. In our experiment, a dedicated ASIC chip for side-channel analysis is utilized and the chip is also equipped with a side-channel countermeasure AES. We show how DL-SCA can recover secret keys against the side-channel countermeasure circuit. Our results demonstrate that DL-SCA can be a more powerful option against side-channel countermeasure implementations than conventional SCAs.</p>

Breaking Hardware Implementation of SM4 Algorithm Using Principal Component Analysis and Machine Learning Classifiers

Power analysis of a FPGA implementation of SM4

Power Attack of SM4 Hardware Implementation Based on SAKURA-G Board

Hardware Implementation of SM4 Based on Composite Filed S-box and It's Security against Machine Learning Attack

Differential Power Attack on SM4 Block Cipher

Power Analysis on SM4 with Boosting Methods

A novel SM4 cryptographic architecture against higher order power analysis attacks

High-Speed Implementation of the SMS4 Algorithm Engine

A Novel Method of Correlation Power Analysis on SM4 Hardware Implementation

SM4 Chaotic Masking Scheme Against Power Analysis Based on FPGA

Distributed power analysis attack on SM4 encryption chip

A PCA Based SVM Hardware Trojan Detection Approach

Power Leakage Detection for a Masked SM3-MAC Hardware Implementation

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2

A Novel SPA Countermeasure for SM2 Hardware Implementation with FPGA

A SPA Countermeasure for Hardware Implementation of SM2 Algorithm

A Lightweight Nonlinear White-Box SM4 Implementation Applied to Edge IoT Agents.

Side Channel Attack on SM4 Algorithm with Ensemble Method.

Practical Approaches Toward Deep-Learning-Based Cross-Device Power Side-Channel Attack

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

Deep learning side-channel attack against hardware implementations of AES