Robust and Efficient Approaches to Evaluating Side Channel and Fault Attack Resilience

Resultado final

Documents, reports (16)

White paper on security testing via simulators

This deliverable will explain the use of the novel leakage simulation technique and its potential for integration with dynamic testing of code (i.e. compilation and testing); it will be targeted to developers in the IoT domain.

Interim report on shortcut formulas

This deliverable will explain the use of shortcut formulas to make statements about leakage properties of implementations.

White Paper on Assurance in Security Evaluations

This is an external deliverable written in the style of a white paper. It will summarise findings around the statistical confidence issues and the optimality of the evaluation approaches. A particular focus will be set on listing the parts of an evaluation that can be efficiently automated and the ones that require expert engineers.

White paper on shortcut formulas

This deliverable is based on D2.1 but will explain the use of shortcut formulas to make statements about leakage properties of implementations to non-experts.

Data management plan

Policy for the management of research data generated during the project.

Interim portfolio of best methods and improved evaluation techniques

This deliverable will provide an update on the portfolio of improved evaluation techniques and their figures of merit.

Report on automation

This is an update and final version of D2.2.

Report on instruction level profiling

This deliverable will detail the methodologies to create accurate instruction-level profiles, illustrated on the example of a popular processor (we envision to base our work on the ARM Cortex-M0.

Interim report on automation

This deliverable will describe which evaluation steps can be safely automated and how.

Final report on standardization

This deliverable covers the effort by the consortium regarding standardisation in over the entire project. It will be publicly available and hence outline the activities and progress without revealing confidential information from the previous deliverables.

Final report on automation

Update of D2.5 addressing Deep Learning methods.

Final report on tools

This deliverable will summarise all work done with regards to producing practically relevant tools. It is intended to be a technical description and discuss implementation options taken alongside the analytical (i.e. theoretical) progress made on a level that is accessible for the relevant stakeholders. It will also communicate how these tools can be used effectively and place considerable emphasis on communicating best practice with regards to producing reliable evidence for the the effectiveness of ‘new attacks’.

White Paper on Evaluation Strategies for AES and ECC.

This is a deliverable written in the style of a white paper. It will summarise definitions and metrics, and give guidance as to how they can be usefully employed in practical evaluations. It will also contain proposals for sound evaluation strategies for some implementation options of AES and ECC. The document will be aimed at practitioners working in industry as well as evaluation labs, and it will be publicised via the appropriate venues.

Report on dissemination activities

Report summarizing the other dissemination activities foreseen by the dissemination plan (cf. Sec. 2.2.1), such as publications, actions towards specific stake holders (JHAS, EMVco, . . . ), yearly briefings, etc.

Final project report

This final report will comply with the Guidance Notes on Project Reporting for H2020 Collaborative Projects, i.e. “A final publishable summary report, a plan for use and dissemination of foreground and a report on societal implications shall be established at the end of the project. The publishable summary should address a wide audience, including the general public and the final report on use and dissemination of foreground should, where appropriate, be an update of the initial plan in Annex I for use and dissemination of foreground and be consistent with the report on societal implications on the use and dissemination of foreground”.

Final portfolio of best methods and improved evaluation techniques

This deliverable will provide the final portfolio of improved evaluation techniques and their figures of merit.

Other (4)

Data sets for ECC implementations

This deliverable contains several data sets of ECC implementations. A data set consists of a description of the device under attack, implementation archtitectures, measurement parameters, alongside leakage traces, inputs/outputs, and used randomness.

SCA Training

Advanced SCA training course integrating new evaluation techniques, as described in Sec. 2.2.1

Data sets for AES implementations

This deliverable contains several data sets for AES implementations. A data set consists of a description of the device under attack, implementation architecture, measurement parameters, alongside leakage traces, inputs/outputs, and used randomness.

Dissemination Workshop

Dedicated workshop for dissemination and feedback collection and joint Walk & Explore session.

Websites, patent fillings, videos etc. (1)

Web site and repository

Web site and repository for information and distribution of results, publication and tools. It will first be put online at M04 and will be regularly updated throughout the project.

Demonstrators, pilots, prototypes (2)

Final Simulator

This deliverable represent the final release of the leakage simulation and fault simulation tool(s).

Prototype Simulator

This deliverable contains a first prototype of a leakage simulator, i.e. a software tool that takes in a (high-level) description of e.g. AES and produces leakage traces given some definend characteristics.

Publicaciones

Conference proceedings (16)

Convolutional Neural Networks with Data Augmentation Against Jitter-Based Countermeasures - Profiling Attacks Without Pre-processing

Autores: Eleonora Cagli, Cécile Dumas, Emmanuel Prouff
Publicado en: CHES 2017, 2017, Page(s) 45-68
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-66787-4_3

Very High Order Masking: Efficient Implementation and Security Evaluation

Autores: Anthony Journault, François-Xavier Standaert
Publicado en: CHES 2017, Lecture Notes in Computer Science - 10529, 2017, Page(s) 623-643, ISBN 978-3-319-66786-7
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-66787-4_30

Categorising and Comparing Cluster-Based DPA Distinguishers

Autores: Xinping Zhou, Carolyn Whitnall, Elisabeth Oswald, Degang Sun, Zhu Wang
Publicado en: SAC 2017, 2017, Page(s) 442-458
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-72565-9_23

Connecting and Improving Direct Sum Masking and Inner Product Masking

Autores: Romain Poussier, Qian Guo, François-Xavier Standaert, Claude Carlet, Sylvain Guilley
Publicado en: CRYPTO 2017, 2017, Page(s) 123-141
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-75208-2_8

Getting the Most Out of Leakage Detection - Statistical tools and measurement setups hand in hand

Autores: Santos Merino del Pozo, François-Xavier Standaert
Publicado en: COSADE 2017, Lecture Notes in Computer Science - 10348, 2017, Page(s) 264-281, ISBN 978-3-319-64646-6
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-64647-3_16

Towards Sound and Optimal Leakage Detection Procedure

Autores: A. Adam Ding, Liwei Zhang, Francois Durvaux, Francois-Xavier Standaert, Yunsi Fei
Publicado en: CARDIS 2017, Lecture Notes in Computer Sciences 10728, 2017, Page(s) 105-122
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-75208-2_7

A Systematic Approach to the Side-Channel Analysis of ECC Implementations with Worst-Case Horizontal Attacks

Autores: Romain Poussier, Yuanyuan Zhou, François-Xavier Standaert
Publicado en: CARDIS 2017, Lecture Notes in Computer Sciences 10529, 2017, Page(s) 534-554
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-66787-4_26

Applying Horizontal Clustering Side-Channel Attacks on Embedded ECC Implementations

Autores: Erick Nascimento, Łukasz Chmielewski
Publicado en: CARDIS 2017, 2017, Page(s) 213-231
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-75208-2_13

Towards Practical Tools for Side Channel Aware Software Engineering: ‘Grey Box’ Modelling for Instruction Leakages

Autores: David McCann, Elisabeth Oswald, Carolyn Whitnall
Publicado en: USENIX Security Symposium 2017, 2017
Editor: USENIX

Leakage Detection with the x2-Test

Autores: Moradi Amir, Richter Bastian, Schneider Tobias, Standaert François-Xavier
Publicado en: CHES 2018, IACR Transactions on Cryptographic Hardware and Embedded Systems, Vol.2018, N°1, 2018, Page(s) 209-237
Editor: Springer International Publishing
DOI: 10.13154/tches.v2018.i1.209-237

Masking Proofs are Tight (and How to Exploit it in Security Evaluations

Autores: Vincent Grosso, François-Xavier Standaert
Publicado en: EUROCRYPT 2018, Lecture Notes in Computer Science - 10821, 2018, Page(s) 385-412, ISBN 978-3-319-78374-1
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-78375-8_13

Key Enumeration from the Adversarial Viewpoint When to Stop Measuring and Start Enumerating?

Autores: Melissa Azouaoui, Romain Poussier, François-Xavier Standaert, Vincent Verneuil
Publicado en: Proceedings of CARDIS 2019, 2019, Page(s) 15 pages
Editor: IACR Cryptology ePrint Atchive

Gradient Visualization for General Characterization in Profiling Attacks

Autores: Loïc Masure, Cécile Dumas, Emmanuel Prouff
Publicado en: Constructive Side-Channel Analysis and Secure Design - 10th International Workshop, COSADE 2019, Darmstadt, Germany, April 3–5, 2019, Proceedings, 11421, 2019, Page(s) 145-167, ISBN 978-3-030-16349-5
Editor: Springer International Publishing
DOI: 10.1007/978-3-030-16350-1_9

A Comprehensive Study of Deep Learning for Side-Channel Analysis

Autores: Loïc Masure, Cécile Dumas, Emmanuel prouff
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, Vol. 2020, n°1, 2020, Page(s) 348-375
Editor: IACR Cryptology eprint Archive

A Critical Analysis of ISO 17825 (‘Testing methods for the mitigation of non-invasive attack classes against cryptographic modules’)

Autores: Carolyn Whitnall, Elisabeth Oswald
Publicado en: Proceedings of ASIACRYPT 2019, 2019
Editor: IACR Cryptology ePrint Archive

Share-slicing: Friend or Foe?

Autores: Si Gao, Ben Marshall, Dan Page and Elisabeth Oswald
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020, 2020, Page(s) 152-174
Editor: IACR Cryptology ePrint Archive

Peer reviewed articles (8)

Start Simple and then Refine: Bias-Variance Decomposition as a Diagnosis Tool for Leakage Profiling

Autores: Liran Lerman, Nikita Veshchikov, Olivier Markowitch, Francois-Xavier Standaert
Publicado en: IEEE Transactions on Computers, 67/2, 2018, Page(s) 268-283, ISSN 0018-9340
Editor: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tc.2017.2731342

Multi-Tuple Leakage Detection and the Dependent Signal Issue

Autores: Olivier Bronchain, Tobias Schneider, François-Xavier Standaert
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, 2019, N°2, 2019, Page(s) 318-345, ISSN 2569-2925
Editor: IACR
DOI: 10.13154/tches.v2019.i2.318-345

Provable Order Amplification for Code-Based Masking: How to Avoid Non-Linear Leakages Due to Masked Operations

Autores: Weijia Wang, Yu Yu, Francois-Xavier Standaert
Publicado en: IEEE Transactions on Information Forensics and Security, 14/11, 2019, Page(s) 3069-3082, ISSN 1556-6013
Editor: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tifs.2019.2912549

Reducing a Masked Implementation’s Effective Security Order with Setup Manipulations

Autores: Itamar Levi, Davide Bellizia, François-Xavier Standaert
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, Vol. 2019, N°2, 2019, Page(s) 293-317, ISSN 2569-2925
Editor: IACR
DOI: 10.13154/tches.v2019.i2.293-317

Ridge-Based DPA: Improvement of Differential Power Analysis For Nanoscale Chips

Autores: Weijia Wang, Yu Yu, Francois-Xavier Standaert, Junrong Liu, Zheng Guo, Dawu Gu
Publicado en: IEEE Transactions on Information Forensics and Security, 13/5, 2018, Page(s) 1301-1316, ISSN 1556-6013
Editor: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tifs.2017.2787985

Beyond algorithmic noise or how to shuffle parallel implementations?

Autores: Itamar Levi, Davide Bellizia, François‐Xavier Standaert
Publicado en: International Journal of Circuit Theory and Applications, 48/5, 2020, Page(s) 674-695, ISSN 0098-9886
Editor: John Wiley & Sons Inc.
DOI: 10.1002/cta.2756

Side-Channel Countermeasures’ Dissection and the Limits of Closed Source Security Evaluations

Autores: Olivier Bronchain, François-Xavier Standaert
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020, N°2, 2020, Page(s) 1-25, ISSN 2569-2925
Editor: IACR
DOI: 10.13154/tches.v2020.i2.1-25

FENL: an ISE to mitigate analogue micro-architectural leakage

Autores: Si Gao, Ben Marshall, Dan Page, Thinh Pham
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020, N°2, 2020, Page(s) 73-98, ISSN 2569-2925
Editor: IACR
DOI: 10.13154/tches.v2020.i2.73-98

Other (10)

Open Database of Side Channel Traces for Deep Learning

Autores: Ryad BENADJILA Eleonora CAGLI Cécile DUMAS Emmanuel PROUFF Rémi STRULLU
Publicado en: 2018
Editor: ANSSI

Study of Deep Learning Techniques for Side-Channel Analysis and Introduction to ASCAD Database

Autores: Emmanuel Prouff Remi Strullu Ryad Benadjila Eleonora Cagli Cecile Dumas
Publicado en: 2018
Editor: IACR eprint

Secure AES128 for ATMega8515

Autores: Ryad Benadjila Victor Lomné Emmanuel Prouff Thomas Roche
Publicado en: 2018
Editor: ANSSI

ELMO: Emulating Leaks for the Arm Cortex-M0 without Access to a Side Channel Lab

Autores: David McCann, Elisabeth Oswald, Carolyn Whitnall
Publicado en: ARM Research Summit 2017, 2017
Editor: ARM

Efficient Evaluation of the Success Rate in Side-Channel Attacks

Autores: Emmanuel Prouff
Publicado en: Second Theory of Implementation Security (TIs) Workshop, 2018
Editor: KULeuven

Deep Learning for Embedded Security Evaluation

Autores: Emmanuel Prouff
Publicado en: Workshop on Practical Hardware Innovation in Security and Characterization (PHISIC 2018), 2018
Editor: --

Modelling M0 leakage generically - How different can leakages be among different M0 devices?

Autores: Si Gao
Publicado en: ARM Research Summit 2018, 2018
Editor: ARM

Lowering the bar: deep learning for side-channel analysis

Autores: Guilherme Perin, Baris Ege, Jasper van Woudenberg
Publicado en: 2018
Editor: RISCURE

Strength in Numbers: Improving Generalization with Ensembles in Profiled Side-channel Analysis

Autores: Guilherme Perin, Lukasz Chmielewski, Stjepan Picek
Publicado en: IACR Cryptology ePrint Archive, 2019/978, 2019
Editor: IACR

Learning when to stop: a mutual information approach to fight overfitting in profiled side-channel analysis

Autores: Guilherme Perin, Ileana Buhan, Stjepan Picek
Publicado en: IACR Cryptology ePrint Archive, 2020
Editor: IACR

Book chapters (6)

How (Not) to Use Welch’s T-Test in Side-Channel Security Evaluations

Autores: François-Xavier Standaert
Publicado en: Smart Card Research and Advanced Applications - 17th International Conference, CARDIS 2018, Montpellier, France, November 12–14, 2018, Revised Selected Papers, 11389, 2019, Page(s) 65-79, ISBN 978-3-030-15461-5
Editor: Springer International Publishing
DOI: 10.1007/978-3-030-15462-2_5

Leakage Certification Revisited: Bounding Model Errors in Side-Channel Security Evaluations

Autores: Olivier Bronchain, Julien M. Hendrickx, Clément Massart, Alex Olshevsky, François-Xavier Standaert
Publicado en: Advances in Cryptology – CRYPTO 2019 - 39th Annual International Cryptology Conference, Santa Barbara, CA, USA, August 18–22, 2019, Proceedings, Part I, 11692, 2019, Page(s) 713-737, ISBN 978-3-030-26947-0
Editor: Springer International Publishing
DOI: 10.1007/978-3-030-26948-7_25

Fast Side-Channel Security Evaluation of ECC Implementations - Shortcut Formulas for Horizontal Side-Channel Attacks Against ECSM with the Montgomery Ladder

Autores: Melissa Azouaoui, Romain Poussier, François-Xavier Standaert
Publicado en: Constructive Side-Channel Analysis and Secure Design - 10th International Workshop, COSADE 2019, Darmstadt, Germany, April 3–5, 2019, Proceedings, 11421, 2019, Page(s) 25-42, ISBN 978-3-030-16349-5
Editor: Springer International Publishing
DOI: 10.1007/978-3-030-16350-1_3

Private Multiplication over Finite Fields

Autores: Sonia Belaïd, Fabrice Benhamouda, Alain Passelègue, Emmanuel Prouff, Adrian Thillard, Damien Vergnaud
Publicado en: Advances in Cryptology – CRYPTO 2017 - 37th Annual International Cryptology Conference, Santa Barbara, CA, USA, August 20–24, 2017, Proceedings, Part III, 10403, 2017, Page(s) 397-426, ISBN 978-3-319-63696-2
Editor: Springer International Publishing
DOI: 10.1007/978-3-319-63697-9_14

Lightweight MACs from Universal Hash Functions

Autores: Sébastien Duval, Gaëtan Leurent
Publicado en: Smart Card Research and Advanced Applications - 18th International Conference, CARDIS 2019, Prague, Czech Republic, November 11–13, 2019, Revised Selected Papers, 11833, 2020, Page(s) 195-215, ISBN 978-3-030-42067-3
Editor: Springer International Publishing
DOI: 10.1007/978-3-030-42068-0_12

Neural Network Model Assessment for Side-Channel Analysis

Autores: Guilherme Perin, Baris Ege, Lukasz Chmielewski
Publicado en: Neural Network Model Assessment for Side-Channel Analysis, 2020, Page(s) 1-21
Editor: IACR Cryptology ePrint Archive