Cache-Timing Template Attacks

Authors:
Billy Bob Brumley;Risto M. Hakala
Affiliations:
Department of Information and Computer Science, Helsinki University of Technology, FI-02015, Finland;Department of Information and Computer Science, Helsinki University of Technology, FI-02015, Finland
Venue:
ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Year:
2009

Citing 19
Cited 6

Lattice Attacks on Digital Signature Schemes

Designs, Codes and Cryptography
Self-Organizing Maps

Self-Organizing Maps
Network Security with Openssl

Network Security with Openssl
Algorithms for Multi-exponentiation

SAC '01 Revised Papers from the 8th Annual International Workshop on Selected Areas in Cryptography
Differential Power Analysis

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems

CRYPTO '96 Proceedings of the 16th Annual International Cryptology Conference on Advances in Cryptology
Parallelizable Elliptic Curve Point Multiplication Method with Resistance against Side-Channel Attacks

ISC '02 Proceedings of the 5th International Conference on Information Security
Resistance against Differential Power Analysis for Elliptic Curve Cryptosystems

CHES '99 Proceedings of the First International Workshop on Cryptographic Hardware and Embedded Systems
Universal Exponentiation Algorithm

CHES '01 Proceedings of the Third International Workshop on Cryptographic Hardware and Embedded Systems
Randomized Addition-Subtraction Chains as a Countermeasure against Power Attacks

CHES '01 Proceedings of the Third International Workshop on Cryptographic Hardware and Embedded Systems
Enhancing Simple Power-Analysis Attacks on Elliptic Curve Cryptosystems

CHES '02 Revised Papers from the 4th International Workshop on Cryptographic Hardware and Embedded Systems
Template Attacks

CHES '02 Revised Papers from the 4th International Workshop on Cryptographic Hardware and Embedded Systems
The Insecurity of the Elliptic Curve Digital Signature Algorithm with Partially Known Nonces

Designs, Codes and Cryptography
Low-Cost Solutions for Preventing Simple Side-Channel Analysis: Side-Channel Atomicity

IEEE Transactions on Computers
Template Attacks on ECDSA

Information Security Applications
Extended hidden number problem and its cryptanalytic applications

SAC'06 Proceedings of the 13th international conference on Selected areas in cryptography
Improved techniques for fast exponentiation

ICISC'02 Proceedings of the 5th international conference on Information security and cryptology
Cache attacks and countermeasures: the case of AES

CT-RSA'06 Proceedings of the 2006 The Cryptographers' Track at the RSA conference on Topics in Cryptology
Further hidden markov model cryptanalysis

CHES'05 Proceedings of the 7th international conference on Cryptographic hardware and embedded systems

New results on instruction cache attacks

CHES'10 Proceedings of the 12th international conference on Cryptographic hardware and embedded systems
Cache timing analysis of RC4

ACNS'11 Proceedings of the 9th international conference on Applied cryptography and network security
High-speed high-security signatures

CHES'11 Proceedings of the 13th international conference on Cryptographic hardware and embedded systems
Compiler mitigations for time attacks on modern x86 processors

ACM Transactions on Architecture and Code Optimization (TACO) - HIPEAC Papers
Fast elliptic curve cryptography in OpenSSL

FC'11 Proceedings of the 2011 international conference on Financial Cryptography and Data Security
Improvement of trace-driven I-Cache timing attack on the RSA algorithm

Journal of Systems and Software

Quantified Score

Hi-index	0.00

Visualization

Abstract

Cache-timing attacks are a serious threat to security-critical software. We show that the combination of vector quantization and hidden Markov model cryptanalysis is a powerful tool for automated analysis of cache-timing data; it can be used to recover critical algorithm state such as key material. We demonstrate its effectiveness by running an attack on the elliptic curve portion of OpenSSL (0.9.8k and under). This involves automated lattice attacks leading to key recovery within hours. We carry out the attack on live cache-timing data without simulating the side channel, showing these attacks are practical and realistic.