Abstract:Algebraic fault analysis (AFA), which combines algebraic cryptanalysis with fault attacks, has represented serious threats to the security of lightweight block ciphers. Inspired by an earlier framework for the analysis of side-channel attacks presented at EUROCRYPT 2009, a new generic framework is proposed to analyze and evaluate algebraic fault attacks on lightweight block ciphers. We interpret AFA at three levels: 1) the target; 2) the adversary; and 3) the evaluator. We describe the capability of an adversary in four parts: 1) the fault injector; 2) the fault model describer; 3) the cipher describer; and 4) the machine solver. A formal fault model is provided to cover most of current fault attacks. Different strategies of building optimal equation set are also provided to accelerate the solving process. At the evaluator level, we consider the approximate information metric and the actual security metric. These metrics can be used to guide adversaries, cipher designers, and industrial engineers. To verify the feasibility of the proposed framework, we make a comprehensive study of AFA on an ultra-lightweight block cipher called LBlock. Three scenarios are exploited, which include injecting a fault to encryption, to key scheduling, or modifying the round number or counter. Our best results show that a single fault injection is enough to recover the master key of LBlock within the affordable complexity in each scenario. To verify the generic feature of the proposed framework, we apply AFA to three other block ciphers, i.e., Data Encryption Standard, PRESENT, and Twofish. The results demonstrate that our framework can be used for different ciphers with different structures.

DPA Resistance of Linear Component in Block Ciphers

Power analysis of a FPGA implementation of SM4

Differential Power Attack on SM4 Block Cipher

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

An AES Chip with DPA Resistance Using Hardware-Based Random Order Execution

Hardware Implementation of SM4 Based on Composite Filed S-box and It's Security against Machine Learning Attack

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

Double Laser-Faults Based PFA on Cryptographic Circuits with Algebraic Analysis

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

Design and implementation of a Differential Power Analysis System for cryptographic devices

Design and Implementation of SM4 Block Cipher Based on Composite Field

A Hardware Implementation Of Des With Combined Countermeasure Against Dpa

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2

Low-cost Design of Stealthy Hardware Trojan for Bit-Level Fault Attacks on Block Ciphers

SM4 Chaotic Masking Scheme Against Power Analysis Based on FPGA

A Framework for the Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

Improvements and recent updates of persistent fault analysis on block ciphers

A novel SM4 cryptographic architecture against higher order power analysis attacks

A Lightweight Countermeasure of SM4 against Side Channel Analysis

Breaking Hardware Implementation of SM4 Algorithm Using Principal Component Analysis and Machine Learning Classifiers

A Chosen-Plaintext Method of CPA on SM4 Block Cipher