Abstract:Algebraic side-channel attack (ASCA) is a typical technique that relies on a general solver to solve the equations of a cipher and its side-channel leaks. It falls under analytical side-channel attack and can recover the entire key at once. Many ASCAs are proposed against the AES, and they utilize the Grobner basis-based, SAT-based, or optimizer-based solver. The advantage of the general solver approach is its generic feature, which can be easily applied to different cryptographic algorithms. The disadvantage is that it is difficult to take into account the specialized properties of the targeted cryptographic algorithms. The results vary depending on what type of solver is used, and the time complexity is quite high when considering the error-tolerant attack scenarios. Thus, we were motivated to find a new approach that would lessen the influence of the general solver and reduce the time complexity of ASCA. This paper proposes a new analytical side-channel attack on AES by exploiting the incomplete diffusion feature in one AES round. We named our technique incomplete diffusion analytical side-channel analysis (IDASCA). Different from previous ASCAs, IDASCA adopts a specialized approach to recover the secret key of AES instead of the general solver. Extensive attacks are performed against the software implementation of AES on an 8-bit microcontroller. Experimental results show that: 1) IDASCA can exploit the side-channel leaks in all AES rounds using a single power trace; 2) it has less time complexity and more robustness than previous ASCAs, especially when considering the error-tolerant attack scenarios; and 3) it can calculate the reduced key search space of AES for the given amount of side-channel leaks. IDASCA can also interpret the mechanism behind previous ASCAs on AES from a quantitative perspective, such as why ASCA can work under unknown plaintext/ciphertext scenarios and what are the extreme cases in ASCAs.

Application of the Composite Field in the Design of an Improved AES S-box Based on Inversion

Design and Implementation of SM4 Block Cipher Based on Composite Field

90 nm CMOS Implementation of Multiplicative Inverse of the S-Box for AES Algorithm using Six Transistor XOR Gate

Side-channel Attack-Resistant AES S-box with Hidden Subfield Inversion and Glitch-Free Masking

An Expression Method to Implement S-Box and Inverse S-Box Substitution for AES Algorithm

Design and Implementation of Generic Low-entropy High-order Composite Field Based Masking Scheme

Design of a Masked S-Box for SM4 Based on Composite Field.

A Low Critical Path Delay Structure For Composite Field Aes S-Box Based On Constant Matrices Multiplication Merging

Low-cost hardware implementation of SM4 based on composite field

An improved s-box of lightweight block cipher roadrunner for hardware optimization

Low Delay AES S-Box Designs Based on Matrix Merging Method

A new algorithm of S-box for hardware implementation of SMS4

8×8 S-boxes over Klein four-group and Galois field $ {GF}\left({2}^{4}\right) $: AES redesign

Low-Cost Energy-Efficient Side-Channel Attacks Resistant AES S-Box with Power-Aware Hiding Inverter in GF(2^4).

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

An Affine Equivalence Algorithm for S-boxes based on Matrix Invariants

A Full Matrix Joint Optimization Method for Hardware Implementation of AES MixColumns/InvMixColumns.

Optimized Quantum Circuit of AES With Interlacing-Uncompute Structure

Area-efficient Polynomial Modular Multiplication over GF(2∧n) and Application to AES

A Compact Implementation of Masked AES S-Box

Exploiting the Incomplete Diffusion Feature: A Specialized Analytical Side-Channel Attack Against the Aes and Its Application to Microcontroller Implementations