Differential power analysis of stream ciphers

  • Authors:
  • W. Fischer;B. M. Gammel;O. Kniffler;J. Velten

  • Affiliations:
  • Infineon Technologies AG, Germany;Infineon Technologies AG, Germany;Infineon Technologies AG, Germany;Infineon Technologies AG, Germany

  • Venue:
  • CT-RSA'07 Proceedings of the 7th Cryptographers' track at the RSA conference on Topics in Cryptology
  • Year:
  • 2007
  • Differential Power Analysis

    CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology

  • Template Attacks

    CHES '02 Revised Papers from the 4th International Workshop on Cryptographic Hardware and Embedded Systems

Quantified Score

Hi-index 0.00

Visualization

Abstract

Side-channel attacks on block ciphers and public key algorithms have been discussed extensively. However, there is only sparse literature about side-cannel attacks on stream ciphers. The few existing references mainly treat timing [8] and template attacks [10], or provide a theoretical analysis [6], [7] of weaknesses of stream cipher constructions. In this paper we present attacks on two focus candidates, Trivium and Grain, of the eSTREAM stream cipher project. The attacks exploit the resynchronization phase of ciphers. A novel concept for choosing initial value vectors is introduced, which totally eliminates the algorithmic noise of the device, leaving only the pure side-channel signal. This attack allows to recover the secret key with a small number of samples and without building templates. To prove the concept we apply the attack to hardware implementations of the ciphers. For both stream ciphers we are able to reveal the complete key.