Collision-Correlation attack against some 1st-order boolean masking schemes in the context of secure devices

  • Authors:
  • Thomas Roche;Victor Lomné

  • Affiliations:
  • ANSSI, Paris 07, SP, France;ANSSI, Paris 07, SP, France

  • Venue:
  • COSADE'13 Proceedings of the 4th international conference on Constructive Side-Channel Analysis and Secure Design
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper we study the collision-correlation attack published by Clavier etal. at CHES 2011 on a 1st-order Boolean masking scheme and show its lack of robustness against unknown and high level of measurement noise. In order to improve the attack, we follow the approach that Gérard and Standaert proposed in a recent paper at CHES 2012. Then we address the problem of heterogeneous leakage pointed out by Gérard and Standaert (when the leakage noise is different from one Sbox output to the others due for instance to implementation particularities or resynchronisation reasons), by inserting an efficient termination algorithm in the key-recovery phase of the attack. In a last contribution, we compare (over simulations and real experiments) the enhanced collision-correlation attack and the 2nd-order CPA attack. Similarly to the results of Gérard and Standaert, we show - in the context of masked implementations - the superiority of 2nd-order CPA when its leakage model is not too far from the real leakage function.