Differential Fault Intensity Analysis
- 1 September 2014
- conference paper
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
Abstract
Recent research has demonstrated that there is no sharp distinction between passive attacks based on side-channel leakage and active attacks based on fault injection. Fault behavior can be processed as side-channel information, offering all the benefits of Differential Power Analysis including noise averaging and hypothesis testing by correlation. This paper introduces Differential Fault Intensity Analysis, which combines the principles of Differential Power Analysis and fault injection. We observe that most faults are biased - such as single-bit, two-bit, or three-bit errors in a byte - and that this property can reveal the secret key through a hypothesis test. Unlike Differential Fault Analysis, we do not require precise analysis of the fault propagation. Unlike Fault Sensitivity Analysis, we do not require a fault sensitivity profile for the device under attack. We demonstrate our method on an FPGA implementation of AES with a fault injection model. We find that with an average of 7 fault injections, we can reconstruct a full 128-bit AES key.Keywords
This publication has 19 references indexed in Scilit:
- A DFA on AES Based on the Entropy of Error DistributionsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2012
- Improved Differential Fault Analysis on AES Key ScheduleIEEE Transactions on Information Forensics and Security, 2011
- When Clocks Fail: On Critical Paths and Clock FaultsLecture Notes in Computer Science, 2010
- Low Voltage Fault Attacks on the RSA CryptosystemPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2009
- Heavy ion testing and 3D simulations of Multiple Cell Upset in 65nm standard SRAMsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2007
- DFA on AESLecture Notes in Computer Science, 2005
- A Differential Fault Attack Against Early Rounds of (Triple-)DESLecture Notes in Computer Science, 2004
- An Optimized S-Box Circuit Architecture for Low Power AES DesignLecture Notes in Computer Science, 2003
- Differential Fault Analysis on A.E.SLecture Notes in Computer Science, 2003
- Differential fault analysis of secret key cryptosystemsLecture Notes in Computer Science, 1997