High-Resolution Side-Channel Attack Using Phase-Based Waveform Matching

Homma, Naofumi; Nagashima, S.; Imai, Yasuhiko; Aoki, Takafumi; Satoh, Akashi

doi:10.1007/11894063_15

Cited by 51 publications

(42 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Phase-only correlation was suggested in [14], where the differences in phase values are used as a realignment vector. The data is then converted back into the time domain for the sidechannel analysis.…”

Section: B Existing Approaches To Overcome Random Clockingmentioning

confidence: 99%

Pre-processing power traces to defeat random clocking countermeasures

Hodgers

Hanley

O’Neill

2015

2015 IEEE International Symposium on Circuits and Systems (ISCAS)

View full text Add to dashboard Cite

Abstract-We describe a pre-processing correlation attack on an FPGA implementation of AES, protected with a random clocking countermeasure that exhibits complex variations in both the location and amplitude of the power consumption patterns of the AES rounds. It is demonstrated that the merged round patterns can be pre-processed to identify and extract the individual round amplitudes, enabling a successful power analysis attack. We show that the requirement of the random clocking countermeasure to provide a varying execution time between processing rounds can be exploited to select a sub-set of data where sufficient current decay has occurred, further improving the attack. In comparison with the countermeasure's estimated security of 3 million traces from an integration attack, we show that through application of our proposed techniques that the countermeasure can now be broken with as few as 13k traces.

show abstract

Section: B Existing Approaches To Overcome Random Clockingmentioning

confidence: 99%

Pre-processing power traces to defeat random clocking countermeasures

Hodgers

Hanley

O’Neill

2015

2015 IEEE International Symposium on Circuits and Systems (ISCAS)

View full text Add to dashboard Cite

show abstract

“…Several techniques in signal processing exist and could be exploited, such as in [12] [13]. One of the synchronization techniques based on the frequency approach is introduced in [14].…”

Section: Electromagnetic Analysis With Spectral Density Based Apprmentioning

confidence: 99%

ElectroMagnetic analysis (EMA) of software AES on Java mobile phones

Aboulkassimi

Agoyan

Freund

et al. 2011

2011 IEEE International Workshop on Information Forensics and Security

View full text Add to dashboard Cite

Abstract-Smartphones, whose market share has increased by 54% between 2009 and 2010, is one of the favored platform for "Convergence Computing". Convergence Computing is a technology in which a single device can provide various services without any restrictions from external devices or networks. Today, smartphones as convergent single device have diverse functions and features such as calling, Internet surfing, game playing, banking, storage of personal and professional data, etc. Some of these use encryption algorithms such as AES (Advanced Encryption Standard). For example, this algorithm is used to authenticate server protocols or to encrypt confidential information. This paper shows that an Electromagnetic Analysis (EMA) on AES is possible on a Java mobile phone to extract secret keys. The latter can then be used for forensic purposes or to recover encrypted data stored in the device. Experiments involving two successful approaches are described and compared : Spectral Density based Approach (SDA) and Template based Resynchronisation Approach (TRA).

show abstract

“…The AOC can be contrasted with the phased-only correlation (POC), described in [6,15,7]. In POC, the DFT of the reference X and desynchronized Y waveforms are normalized prior to being multiplied.…”

Section: Poc: Phase-only Correlationmentioning

confidence: 99%

Formal Framework for the Evaluation of Waveform Resynchronization Algorithms

Guilley

Khalfallah

Lomné

et al. 2011

Information Security Theory and Practice. Security and Privacy of Mobile Devices in Wireless Communication

View full text Add to dashboard Cite

Abstract. In side-channel analysis, the waveforms can be acquired misaligned. Several algorithms have been put forward to resynchronize signals, as a pretreatment before the attack proper. In this article, we examine two of them, namely amplitude-only and phase-only correlation (abridged AOC and POC), and introduce a third one, called threshold-POC (T-POC) that corrects a flaw of the phase-only correlation. Those three resynchronization algorithms are computationally efficient insofar as they find the correct displacement in O(n log n) steps per waveform made up of n samples.Former studies on resynchronization algorithms quantified their quality by their indirect effect on side-channel attacks. We introduce in this article a formal framework for the evaluation of the resynchronization algorithms per se. A benchmarking on representative waveforms shows that there is an adequation between the waveforms and the most suitable resynchronization algorithm. On unprotected circuits, the intrawaveform similarity in amplitude or in phase determines the choice for either the AOC or the POC algorithm. Circuits protected by hiding countermeasures have their amplitude made as constant as possible. Therefore, the intra-waveform similarity in amplitude is lowered and the POC is better. Circuits protected by masking countermeasures have their amplitude made as random as possible. Therefore, even if the intrawaveform similarity in amplitude is high, the inter-waveform similarity is reduced; hence a trade-off between AOC and POC, namely T-POC, is the most adequate resynchronization algorithm.

show abstract

High-Resolution Side-Channel Attack Using Phase-Based Waveform Matching

Cited by 51 publications

References 8 publications

Pre-processing power traces to defeat random clocking countermeasures

Pre-processing power traces to defeat random clocking countermeasures

ElectroMagnetic analysis (EMA) of software AES on Java mobile phones

Formal Framework for the Evaluation of Waveform Resynchronization Algorithms

Contact Info

Product

Resources

About