Abstract:In recent years a new class of side-channel attacks has emerged. Instead of targeting device emissions during dynamic computation, adversaries now frequently exploit the leakage or response behaviour of integrated circuits in a static state. Members of this class include Static Power Side-Channel Analysis (SCA), Laser Logic State Imaging (LLSI) and Impedance Analysis (IA). Despite relying on different physical phenomena, they all enable the extraction of sensitive information from circuits in a static state with high accuracy and low noise -- a trait that poses a significant threat to many established side-channel countermeasures. In this work, we point out the shortcomings of existing solutions and derive a simple yet effective countermeasure. We observe that in order to realise their full potential, static side-channel attacks require the targeted data to remain unchanged for a certain amount of time. For some cryptographic secrets this happens naturally, for others it requires stopping the target circuit's clock. Our proposal, called Borrowed Time, hinders an attacker's ability to leverage such idle conditions, even if full control over the global clock signal is obtained. For that, by design, key-dependent data may only be present in unprotected temporary storage when strictly needed. Borrowed Time then continuously monitors the target circuit and upon detecting an idle state, securely wipes sensitive contents. We demonstrate the need for our countermeasure and its effectiveness by mounting practical static power SCA attacks against cryptographic systems on FPGAs, with and without Borrowed Time. In one case we attack a masked implementation and show that it is only protected with our countermeasure in place. Furthermore we demonstrate that secure on-demand wiping of sensitive data works as intended, affirming the theory that the technique also effectively hinders LLSI and IA.

A Reliable Time Lock Encryption Scheme For Relatively Weak Computational Resources

How to build time-lock encryption

Tight Short-Lived Signatures

Constant time encryption as a countermeasure against remote cache timing attacks

Astrolabous: A Universally Composable Time-Lock Encryption Scheme

Blockchain-based Decentralized Time Lock Machines: Automated Reveal of Time-sensitive Information

SSE-CTC: Search over Encrypted Data with Owner-Enforced and Complete Time Constraints

Practical Verifiable Time-Lock Puzzle: Pre- and Post-Solution Verification

Network Virtualization Incorporation and Projection System Technologies Using Block Chaining

A Novel Revocable Lightweight Authentication Scheme for Resource-Constrained Devices in Cyber–Physical Power Systems

A Highly Secure Authentication Module for Smart Door Lock with Temporary Key Function.

Enhanced Secure Algorithm for Message Communion

A Revocable Certificateless Encryption Scheme for Multi‐User

Delegated Time-Lock Puzzle

Secure Combination of Untrusted Time information Based on Optimized Dempster-Shafer Theory

Software implementation level countermeasures against the cache timing attack on advanced encryption standard

Robust Constant-Time Cryptography

Efficient Completely Non-Malleable and RKA Secure Public Key Encryptions

ZLR: a fast online authenticated encryption scheme achieving full security

On Borrowed Time -- Preventing Static Side-Channel Analysis

Efficient Security Algorithm for Power-Constrained IoT Devices