Abstract:<p>In the field of image recognition, machine learning technologies, especially deep learning, have been rapidly advancing alongside the advances of hardware such as GPUs. In image recognition, in general, large numbers of labeled images to be identified are input to a neural network, and repeatedly learning the images enables the neural network to identify objects with high accuracy. A new profiling side-channel attack method, the deep learning side-channel attack (DL-SCA), utilizes the neural network's high identifying ability to unveil a cryptographic module's secret key from side-channel information. In DL-SCAs, the neural network is trained with power waveforms captured from a target cryptographic module, and the trained network extracts the leaky part that depends on the secret. However, at this stage, the main target of investigation has been software implementation, and studies regarding hardware implementation, such as ASIC, are somewhat lacking. In this paper, we first depict deep learning techniques, profiling side-channel attacks, and leak models to clarify the relation between secret and side channels. Next, we investigate the use of DL-SCA against hardware implementations of AES and discuss the problem derived from the Hamming distance model and ShiftRow operation of AES. To solve the problem, we propose a new network training method called "mixed model dataset based on round-round XORed value." We prove that our proposal solves the problem and gives the attack capability to neural networks. We also compare the attack performance and characteristics of DL-SCA to conventional analysis methods such as correlation power analysis and conventional template attack. In our experiment, a dedicated ASIC chip for side-channel analysis is utilized and the chip is also equipped with a side-channel countermeasure AES. We show how DL-SCA can recover secret keys against the side-channel countermeasure circuit. Our results demonstrate that DL-SCA can be a more powerful option against side-channel countermeasure implementations than conventional SCAs.</p>

28Nm Asynchronous Area-Saving AES Processor with High Common and Machine Learning Side-Channel Attack Resistance.

Machine Learning Assisted Side-Channel-Attack Countermeasure and Its Application on a 28-Nm AES Circuit.

MDASCA: an enhanced algebraic side-channel attack for error tolerance and new leakage model exploitation

Exploiting the Incomplete Diffusion Feature: A Specialized Analytical Side-Channel Attack Against the Aes and Its Application to Microcontroller Implementations

Machine Learning Based Side-Channel-Attack Countermeasure with Hamming-Distance Redistribution and Its Application on Advanced Encryption Standard

A Low-Energy High-Throughput Asynchronous AES for Secure Smart Cards

Side-Channel Information Leakage Analysis And Countermeasures In An Embedded Cpu Microarchitecture

Energy-Efficient Side-Channel Attack Countermeasure with Awareness and Hybrid Configuration Based on It

A Side-Channel Analysis Resistant Reconfigurable Cryptographic Coprocessor Supporting Multiple Block Cipher Algorithms

A Secure Reconfigurable Crypto IC with Countermeasures Against SPA, DPA, and EMA.

Side-channel Attack-Resistant AES S-box with Hidden Subfield Inversion and Glitch-Free Masking

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

Design and Implementation of a Reconfigurable Cryptographic Coprocessor with Multiple Side-Channel Attacks Countermeasures.

AES software and hardware system co‐design for resisting side channel attacks

Deep learning side-channel attack against hardware implementations of AES

Authenticated encryption chip implementation against side-channel attack

ASIC Design and Implementation of Low-Power AES S-Box

Resistance to Side-Channel Attacks of CPU Based on Random Power Consumption Disturbance Strategy

Dynamic Inhomogeneous S-Boxes Design for Efficient AES Masking Mechanisms

Effective Deep Learning-based Side-Channel Analyses Against ASCAD.

A Compact AES Hardware Implementation Secure Against 1St-Order Side-Channel Attacks