Towards Easy Leakage Certification

Durvaux, François; Standaert, François‐Xavier; Pozo, Santos Merino Del

doi:10.1007/978-3-662-53140-2_3

Cited by 15 publications

(6 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Time is a limiting factor for the evaluation process and for the same reason CC evaluations contain time spent for the evaluation as a metric. Some work deal with further simplifying the evaluation process [22].…”

Section: Proposed Hybrid Side Channel Testing Methodology 41 Contextmentioning

confidence: 99%

CC Meets FIPS: A Hybrid Test Methodology for First Order Side Channel Analysis

Roy

Bhasin

Guilley

et al. 2019

IEEE Trans. Comput.

View full text Add to dashboard Cite

Common Criteria (CC) and FIPS 140-3 are two popular side channel testing methodologies. Test Vector Leakage Assessment Methodology (TVLA), a potential candidate for FIPS, can detect the presence of side-channel information in leakage measurements. However, TVLA results cannot be used to quantify side-channel vulnerability and it is an open problem to derive its relationship with side channel attack success rate (SR), i.e. a common metric for CC. In this paper, we extend the TVLA testing beyond its current scope. Precisely, we derive a concrete relationship between TVLA and signal to noise ratio (SNR). The linking of the two metrics allows direct computation of success rate (SR) from TVLA for given choice of intermediate variable and leakage model and thus unify these popular side channel detection and evaluation metrics. An end-to-end methodology is proposed, which can be easily automated, to derive attack SR starting from TVLA testing. The methodology works under both univariate and multivariate setting and is capable of quantifying any first order leakage. Detailed experiments have been provided using both simulated traces and real traces on SAKURA-GW platform. Additionally, the proposed methodology is benchmarked against previously published attacks on DPA contest v4.0 traces, followed by extension to jitter based countermeasure. The result shows that the proposed methodology provides a quick estimate of SR without performing actual attacks, thus bridging the gap between CC and FIPS.

show abstract

Section: Proposed Hybrid Side Channel Testing Methodology 41 Contextmentioning

confidence: 99%

CC Meets FIPS: A Hybrid Test Methodology for First Order Side Channel Analysis

Roy

Bhasin

Guilley

et al. 2019

IEEE Trans. Comput.

View full text Add to dashboard Cite

show abstract

“…An additional way to approach the order reduction issue is to phrase it as a leakage certification problem [18,19]. The leakage certification procedure allows us to assess the quality of a leakage model w.r.t.…”

Section: Security Order Evaluationmentioning

confidence: 99%

“…In our approach, we use the t-test-based certification toolset of Durvaux, Standaert, and Del Pozo [18], which focuses on the assumption and estimation errors for each statistical moment. Initially, we start with an erroneous model for our 4-share implementation: we assume that the leakage is sufficiently captured by a Gaussian template, i.e., a normal distribution that is fully described by the first two statistical moments.…”

Section: Security Order Evaluationmentioning

confidence: 99%

“…We provide a concrete evaluation of our implementations on a BeagleBone Black, which has been used successfully before to perform differential electromagnetic analysis at 1 GHz [2]. Using nearly the same setup, we employ the popular TVLA methodology [13] in conjunction with leakage certification [18] and we show that there is actually some leakage in the 3rd order of our 4-share implementation, but not in the 2nd order. We then continue to bound the measurement complexity of the 8-share implementation using an information-theoretic approach [17].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Vectorizing Higher-Order Masking

Grégoire

Papagiannopoulos

Schwabe

et al. 2018

Constructive Side-Channel Analysis and Secure Design

View full text Add to dashboard Cite

The cost of higher-order masking as a countermeasure against side-channel attacks is often considered too high for practical scenarios, as protected implementations become very slow. At Eurocrypt 2017, the bounded moment leakage model was proposed to study the (theoretical) security of parallel implementations of masking schemes [5]. Work at CHES 2017 then brought this to practice by considering an implementation of AES with 32 shares [26], bitsliced inside 32-bit registers of ARM Cortex-M processors. In this paper we show how the NEON vector instructions of larger ARM Cortex-A processors can be exploited to build much faster masked implementations of AES. Specifically, we present AES with 4 and 8 shares, which in theory provide security against 3rd and 7th-order attacks, respectively. The software is publicly available and optimized for the ARM Cortex-A8. We use refreshing and multiplication algorithms that are proven to be secure in the bounded moment leakage model and to be strongly non-interfering. Additionally, we perform a concrete side-channel evaluation on a BeagleBone Black, using a combination of test vector leakage assessment (TVLA), leakage certification tools and information-theoretic bounds.

show abstract

“…To conclude this paper, we therefore list its applications that confirm its relevance. First from a methodological point of view, MC-DPA has been a building block to improve recent works on leakage detection/assessment [10,9,36] and for leakage certification [8] (to appear at CHES 2016). It is also a useful tool to discuss independence issues in masking proofs [6].…”

Section: Follow Up Workmentioning

confidence: 99%

Moments-Correlating DPA

Moradi

Standaert

2016

Proceedings of the 2016 ACM Workshop on Theory of Implementation Security

Self Cite

View full text Add to dashboard Cite

We generalize correlation-enhanced power analysis collision attacks into moments-correlating DPA. The resulting distinguisher is applicable to the profiled and non-profiled (collision) settings and is able to exploit information lying in any statistical moment. It also benefits from a simple ruleof-thumb to estimate its data complexity. Experimental results show that such a tool allows answering with confidence to some important questions regarding the design of sidechannel countermeasures (e.g. what is the most informative statistical moment in the leakages of a threshold implementation). We further argue that moments-correlating DPA is a natural candidate for leakage detection tests, enjoying the simplicity of correlation power analysis and advanced features for the evaluation of higher-order attacks with an easy-to-compute confidence level.

show abstract

Towards Easy Leakage Certification

Cited by 15 publications

References 23 publications

CC Meets FIPS: A Hybrid Test Methodology for First Order Side Channel Analysis

CC Meets FIPS: A Hybrid Test Methodology for First Order Side Channel Analysis

Vectorizing Higher-Order Masking

Moments-Correlating DPA

Contact Info

Product

Resources

About