An AES smart card implementation resistant to power analysis attacks

Authors:
Christoph Herbst;Elisabeth Oswald;Stefan Mangard
Affiliations:
Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria;Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria;Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria
Venue:
ACNS'06 Proceedings of the 4th international conference on Applied Cryptography and Network Security
Year:
2006

Citing 10
Cited 29

Differential Power Analysis

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
Differential Power Analysis in the Presence of Hardware Countermeasures

CHES '00 Proceedings of the Second International Workshop on Cryptographic Hardware and Embedded Systems
An Implementation of DES and AES, Secure against Some Attacks

CHES '01 Proceedings of the Third International Workshop on Cryptographic Hardware and Embedded Systems
On the Masking Countermeasure and Higher-Order Power Analysis Attacks

ITCC '05 Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC'05) - Volume I - Volume 01
A simple power-analysis (SPA) attack on implementations of the AES key expansion

ICISC'02 Proceedings of the 5th international conference on Information security and cryptology
Provably secure masking of AES

SAC'04 Proceedings of the 11th international conference on Selected Areas in Cryptography
A side-channel analysis resistant description of the AES s-box

FSE'05 Proceedings of the 12th international conference on Fast Software Encryption
Practical second-order DPA attacks for masked smart card implementations of block ciphers

CT-RSA'06 Proceedings of the 2006 The Cryptographers' Track at the RSA conference on Topics in Cryptology
On second-order differential power analysis

CHES'05 Proceedings of the 7th international conference on Cryptographic hardware and embedded systems
An efficient masking scheme for AES software implementations

WISA'05 Proceedings of the 6th international conference on Information Security Applications

Protecting AES Software Implementations on 32-Bit Processors Against Power Analysis

ACNS '07 Proceedings of the 5th international conference on Applied Cryptography and Network Security
Collision Attacks on AES-Based MAC: Alpha-MAC

CHES '07 Proceedings of the 9th international workshop on Cryptographic Hardware and Embedded Systems
Block Ciphers Implementations Provably Secure Against Second Order Side Channel Analysis

Fast Software Encryption
Attacking State-of-the-Art Software Countermeasures--A Case Study for AES

CHES '08 Proceeding sof the 10th international workshop on Cryptographic Hardware and Embedded Systems
Algebraic Side-Channel Attacks on the AES: Why Time also Matters in DPA

CHES '09 Proceedings of the 11th International Workshop on Cryptographic Hardware and Embedded Systems
Higher-Order Masking and Shuffling for Software Implementations of Block Ciphers

CHES '09 Proceedings of the 11th International Workshop on Cryptographic Hardware and Embedded Systems
Non-deterministic processors: FPGA-based analysis of area, performance and security

WESS '09 Proceedings of the 4th Workshop on Embedded Systems Security
Analysis of the split mask countermeasure for embedded systems

WESS '09 Proceedings of the 4th Workshop on Embedded Systems Security
Investigations of power analysis attacks and countermeasures for ARIA

WISA'06 Proceedings of the 7th international conference on Information security applications: PartI
Improved side-channel collision attacks on AES

SAC'07 Proceedings of the 14th international conference on Selected areas in cryptography
A new remote keyless entry system resistant to power analysis attacks

ICICS'09 Proceedings of the 7th international conference on Information, communications and signal processing
Correlation-enhanced power analysis collision attack

CHES'10 Proceedings of the 12th international conference on Cryptographic hardware and embedded systems
How leaky is an extractor?

LATINCRYPT'10 Proceedings of the First international conference on Progress in cryptology: cryptology and information security in Latin America
Principles on the security of AES against first and second-order differential power analysis

ACNS'10 Proceedings of the 8th international conference on Applied cryptography and network security
Lightweight cryptography and DPA countermeasures: a survey

FC'10 Proceedings of the 14th international conference on Financial cryptograpy and data security
Pushing the limits: a very compact and a threshold implementation of AES

EUROCRYPT'11 Proceedings of the 30th Annual international conference on Theory and applications of cryptographic techniques: advances in cryptology
Can code polymorphism limit information leakage?

WISTP'11 Proceedings of the 5th IFIP WG 11.2 international conference on Information security theory and practice: security and privacy of mobile devices in wireless communication
A fast and provably secure higher-order masking of AES S-box

CHES'11 Proceedings of the 13th international conference on Cryptographic hardware and embedded systems
Fresh re-keying: security against side-channel and fault attacks for low-cost devices

AFRICACRYPT'10 Proceedings of the Third international conference on Cryptology in Africa
Revisiting higher-order DPA attacks: multivariate mutual information analysis

CT-RSA'10 Proceedings of the 2010 international conference on Topics in Cryptology
Masking with randomized look up tables

Cryptography and Security
Fresh re-keying II: securing multiple parties against side-channel and fault attacks

CARDIS'11 Proceedings of the 10th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
Randomized execution algorithms for smart cards to resist power analysis attacks

Journal of Systems Architecture: the EUROMICRO Journal
Selecting time samples for multivariate DPA attacks

CHES'12 Proceedings of the 14th international conference on Cryptographic Hardware and Embedded Systems
A novel circuit design methodology to reduce side channel leakage

SPACE'12 Proceedings of the Second international conference on Security, Privacy, and Applied Cryptography Engineering
Shuffling against side-channel attacks: a comprehensive study with cautionary note

ASIACRYPT'12 Proceedings of the 18th international conference on The Theory and Application of Cryptology and Information Security
Design and Implementation of a Zero-Knowledge Authentication Framework for Java Card

International Journal of Information Security and Privacy
Efficient removal of random delays from embedded software implementations using hidden markov models

CARDIS'12 Proceedings of the 11th international conference on Smart Card Research and Advanced Applications
Sleuth: automated verification of software power analysis countermeasures

CHES'13 Proceedings of the 15th international conference on Cryptographic Hardware and Embedded Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this article we describe an efficient AES software implementation that is well suited for 8-bit smart cards and resistant against power analysis attacks. Our implementation masks the intermediate results and randomizes the sequence of operations at the beginning and the end of the AES execution. Because of the masking, it is secure against simple power analysis attacks, template attacks and first-order DPA attacks. Due to the combination of masking and randomization, it is resistant against higher-order DPA attacks. Resistant means that a large number of measurements is required for a successful attack. This expected number of measurements is tunable. The designer can choose the amount of randomization and thereby increase the number of measurements. This article also includes a practical evaluation of the countermeasures. The results prove the theoretical assessment of the countermeasures to be correct.