Abstract:Algebraic side-channel attack (ASCA) is a typical technique that relies on a general solver to solve the equations of a cipher and its side-channel leaks. It falls under analytical side-channel attack and can recover the entire key at once. Many ASCAs are proposed against the AES, and they utilize the Grobner basis-based, SAT-based, or optimizer-based solver. The advantage of the general solver approach is its generic feature, which can be easily applied to different cryptographic algorithms. The disadvantage is that it is difficult to take into account the specialized properties of the targeted cryptographic algorithms. The results vary depending on what type of solver is used, and the time complexity is quite high when considering the error-tolerant attack scenarios. Thus, we were motivated to find a new approach that would lessen the influence of the general solver and reduce the time complexity of ASCA. This paper proposes a new analytical side-channel attack on AES by exploiting the incomplete diffusion feature in one AES round. We named our technique incomplete diffusion analytical side-channel analysis (IDASCA). Different from previous ASCAs, IDASCA adopts a specialized approach to recover the secret key of AES instead of the general solver. Extensive attacks are performed against the software implementation of AES on an 8-bit microcontroller. Experimental results show that: 1) IDASCA can exploit the side-channel leaks in all AES rounds using a single power trace; 2) it has less time complexity and more robustness than previous ASCAs, especially when considering the error-tolerant attack scenarios; and 3) it can calculate the reduced key search space of AES for the given amount of side-channel leaks. IDASCA can also interpret the mechanism behind previous ASCAs on AES from a quantitative perspective, such as why ASCA can work under unknown plaintext/ciphertext scenarios and what are the extreme cases in ASCAs.

Fault Analysis on AES: A Property-Based Verification Perspective

A Framework for the Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

An Automated Framework for Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

Double Laser-Faults Based PFA on Cryptographic Circuits with Algebraic Analysis

Improving DFA Attacks on AES with Unknown and Random Faults

Low-cost Design of Stealthy Hardware Trojan for Bit-Level Fault Attacks on Block Ciphers

Efficient Method for Random Fault Attack Against Aes Hardware Implementation

Improving DFA on AES using all-fault ciphertexts

A Hybrid Fault Model For Differential Fault Attack On Aes

RAFA: Redundancies-assisted Algebraic Fault Analysis and its implementation on SPN block ciphers.

Improved algebraic fault analysis: a case study on piccolo and applications to other lightweight block ciphers

Differential Fault Analysis on AES and DES

Automatic Search of Meet-in-the-Middle Differential Fault Analysis on AES-like Ciphers.

A High-Efficient and Accurate Fault Model Aiming at FPGA-based AES Cryptographic Applications

Free Fault Leakages for Deep Exploitation: Algebraic Persistent Fault Analysis on Lightweight Block Ciphers.

Multiple Persistent Faults Analysis with Unknown Faults

Exploiting the Incomplete Diffusion Feature: A Specialized Analytical Side-Channel Attack Against the Aes and Its Application to Microcontroller Implementations

Algebraic Fault Analysis on GOST for Key Recovery and Reverse Engineering

A High-Efficient Fault Attack on Aes S-Box

A Comprehensive Study of Algebraic Fault Analysis on PRINCE