A Fault Attack on the LED Block Cipher

Parametric Trojans for Fault-Injection Attacks on Cryptographic Hardware

“…The fault-affected output values are collected, and differential cryptanalysis is used to derive the secret key. Recently, a number of highly efficient attacks on state-of-the-art ciphers including AES [5], LED [6], [7], PRESENT [8] and PRINCE [7], [9] have been reported. These attacks need a small number of fault injections (1 for AES and LED64, around 3-4 for LED128 and PRINCE) for successful key recovery.…”

Hardware security and test: Friends or enemies?

“…is derived by differential cryptanalysis of and . For example, one can supplement the equation ( , ) = by the findings from the differential cryptanalysis that quickly guide the solution procedure towards the key [18]. Therefore, fault-based attacks target the implementation of the cryptographic algorithm rather than the algorithm itself and thus overcome its cryptographic strength.…”

“…Therefore, fault-based attacks target the implementation of the cryptographic algorithm rather than the algorithm itself and thus overcome its cryptographic strength. A number of techniques are known for introducing physical faults; these include manipulation of the clock signal, voltage supply, and pinpointed irradiation by a laser [18].…”

Algebraic Fault Attack on the SHA-256 Compression Function

“…Then Biham and Shamir proposed the DFA attack in 1997, which processes the right and faulty outputs with differential cryptanalysis [8]. After that, DFA has been successfully applied to many block ciphers and stream ciphers, such as AES [12,33,34], SHACAL1 [11], LED [35,36], Piccolo [37], PRINCE [24], Trivium [9,23], RC4 [13,14]. Besides attacks against block and stream ciphers, the DFA attack on the compression function of a hash function has also been studied.…”

“…An important advantage of AFA over DFA is that AFA does not rely on the manual analysis of differential propagations. By applying AFA, the previous DFA attacks on block and stream ciphers have been improved, such as AES [30], LED [26,31], Piccolo [4], Trivium [29].…”