Side Channel Attacks - Revision history

NKirnbauer: gendering

2024-08-27T18:11:10Z

gendering

← Older revision		Revision as of 18:11, 27 August 2024
Line 60:		Line 60:
	Performing such an attack requires a series of current measurements, which can be measured with an oscilloscope. Each current signal that is captured during the analysis is called a power trace. An attacker normally needs a large number of these power traces in order to successfully carry out a Power-Monitoring Attack. After the measurement, the relationship between the power consumption and the secret key is analysed in various ways.		Performing such an attack requires a series of current measurements, which can be measured with an oscilloscope. Each current signal that is captured during the analysis is called a power trace. An attacker normally needs a large number of these power traces in order to successfully carry out a Power-Monitoring Attack. After the measurement, the relationship between the power consumption and the secret key is analysed in various ways.

	When measuring the power consumption of a device, it is important to be aware that there are two types of power that affect power consumption: dynamic power and leakage power. The first is caused by switching activity of transistors within a device and the second is unwanted behaviour of a transistor. An attacker normally wants to capture dynamic power signals as they directly relate to the functional behaviour of the device. This means that he can use these signals to obtain information about certain operations that are currently being carried out inside of the device.<ref name="BT19"/>		When measuring the power consumption of a device, it is important to be aware that there are two types of power that affect power consumption: dynamic power and leakage power. The first is caused by switching activity of transistors within a device and the second is unwanted behaviour of a transistor. An attacker normally wants to capture dynamic power signals as they directly relate to the functional behaviour of the device. This means that they can use these signals to obtain information about certain operations that are currently being carried out inside of the device.<ref name="BT19"/>

	==== Simple Power Analysis ====		==== Simple Power Analysis ====
Line 70:		Line 70:
	==== Differential Power Analysis ====		==== Differential Power Analysis ====

	Differential Power Analysis (DPA) is the most common type of Power-Monitoring Attack and generally the best-known Side Channel Attack. This is because the attacker does not need to have any prior knowledge of the device ~~he is~~ trying to attack. Another reason is that this attack is very effective at capturing high quality signals in environments with high levels of noise. What can be seen as a disadvantage is that it typically requires a larger number of power traces compared to Simple Power Analysis. But that fact also makes it more powerful. <br/>		Differential Power Analysis (DPA) is the most common type of Power-Monitoring Attack and generally the best-known Side Channel Attack. This is because the attacker does not need to have any prior knowledge of the device they are trying to attack. Another reason is that this attack is very effective at capturing high quality signals in environments with high levels of noise. What can be seen as a disadvantage is that it typically requires a larger number of power traces compared to Simple Power Analysis. But that fact also makes it more powerful. <br/>
	Differential Power Analysis requires two phases: data collection and data analysis (just like SPA). In the data analysis phase, the current traces are analysed statistically (e.g. differences in the mean values).<ref name="BT19"/>		Differential Power Analysis requires two phases: data collection and data analysis (just like SPA). In the data analysis phase, the current traces are analysed statistically (e.g. differences in the mean values).<ref name="BT19"/>

Line 81:		Line 81:
	==== Template Power Analysis ====		==== Template Power Analysis ====

	The Template Power Analysis is a more advanced form of the Simple Power Analysis (SPA). The attacker characterises and saves known and recognized patterns in the power traces as templates. He then ~~compares~~ these templates with the power traces collected from the target device. In this way, ~~he recognizes~~ matches and therefore knows what operations were being carried out when the power traces were measured.<ref name="BT19"/><ref name="CRR03"/>		The Template Power Analysis is a more advanced form of the Simple Power Analysis (SPA). The attacker characterises and saves known and recognized patterns in the power traces as templates. They then compare these templates with the power traces collected from the target device. In this way, they recognize matches and therefore knows what operations were being carried out when the power traces were measured.<ref name="BT19"/><ref name="CRR03"/>

	=== Fault-Injection Attacks ===		=== Fault-Injection Attacks ===

SVrdoljak: /* Fault-Injection Attacks */

2021-12-21T20:08:12Z

Fault-Injection Attacks

← Older revision		Revision as of 20:08, 21 December 2021
Line 84:		Line 84:

	=== Fault-Injection Attacks ===		=== Fault-Injection Attacks ===
	The Fault-Injection ~~Attacks~~ is a attack where keys/secrets and sensitive information is "stolen" from cryptographic devices or systems by generating faults. Usually the attacker exploits a system that is more prone to being vulnerable due to its higher design complexity and incomplete verification. Voltage glitching, electromagnetic glitching or clock glitching are some of the ways a fault is generated. Fault-Injection Attacks are usually differential, because the output of a faulty operation is compared to a non-faulty operation.<ref name="ISCA"/>		The Fault-Injection Attack is a attack where keys/secrets and sensitive information is "stolen" from cryptographic devices or systems by generating faults. Usually the attacker exploits a system that is more prone to being vulnerable due to its higher design complexity and incomplete verification. Voltage glitching, electromagnetic glitching or clock glitching are some of the ways a fault is generated. Fault-Injection Attacks are usually differential, because the output of a faulty operation is compared to a non-faulty operation.<ref name="ISCA"/>

	=== Others ===		=== Others ===

SVrdoljak: /* Types of Side Channel Attacks */

2021-12-21T19:04:58Z

Types of Side Channel Attacks

← Older revision		Revision as of 19:04, 21 December 2021
Line 84:		Line 84:

	=== Fault-Injection Attacks ===		=== Fault-Injection Attacks ===
	The Fault-Injection Attacks is a attack where keys/secrets and sensitive information is "stolen" from cryptographic devices or systems by generating faults. Usually the attacker exploits a system that is more prone to being vulnerable due to its higher design complexity and incomplete verification. Voltage glitching, electromagnetic glitching or clock glitching are some of the ways a fault is generated. Fault-Injection Attacks are usually differential, because the output of a faulty operation is compared to a non-faulty operation.<ref name="~~7522801~~"/>		The Fault-Injection Attacks is a attack where keys/secrets and sensitive information is "stolen" from cryptographic devices or systems by generating faults. Usually the attacker exploits a system that is more prone to being vulnerable due to its higher design complexity and incomplete verification. Voltage glitching, electromagnetic glitching or clock glitching are some of the ways a fault is generated. Fault-Injection Attacks are usually differential, because the output of a faulty operation is compared to a non-faulty operation.<ref name="ISCA"/>

	=== Others ===		=== Others ===

SVrdoljak: /* References */

2021-12-21T19:04:41Z

References

← Older revision		Revision as of 19:04, 21 December 2021
Line 116:		Line 116:
	<ref name="Mai12">Ken Mai. Side Channel Attacks and Countermeasures, pages 175-194. Springer New York, New York, NY, 2012.</ref>		<ref name="Mai12">Ken Mai. Side Channel Attacks and Countermeasures, pages 175-194. Springer New York, New York, NY, 2012.</ref>
	<ref name="CPA">https://cryptography.gmu.edu/documentation/fobos/cpa.html</ref>		<ref name="CPA">https://cryptography.gmu.edu/documentation/fobos/cpa.html</ref>
	<ref name="~~7522801~~">Y. Li, M. Chen and J. Wang, "Introduction to side-channel attacks and fault attacks," 2016 Asia-Pacific International Symposium on Electromagnetic Compatibility (APEMC), 2016, pp. 573-575, doi: 10.1109/APEMC.2016.7522801.</ref>		<ref name="ISCA">Y. Li, M. Chen and J. Wang, "Introduction to side-channel attacks and fault attacks," 2016 Asia-Pacific International Symposium on Electromagnetic Compatibility (APEMC), 2016, pp. 573-575, doi: 10.1109/APEMC.2016.7522801.</ref>

	</references>		</references>

	[[Category:Basic]]		[[Category:Basic]]

SVrdoljak: /* References */

2021-12-21T19:04:24Z

References

← Older revision		Revision as of 19:04, 21 December 2021
Line 116:		Line 116:
	<ref name="Mai12">Ken Mai. Side Channel Attacks and Countermeasures, pages 175-194. Springer New York, New York, NY, 2012.</ref>		<ref name="Mai12">Ken Mai. Side Channel Attacks and Countermeasures, pages 175-194. Springer New York, New York, NY, 2012.</ref>
	<ref name="CPA">https://cryptography.gmu.edu/documentation/fobos/cpa.html</ref>		<ref name="CPA">https://cryptography.gmu.edu/documentation/fobos/cpa.html</ref>
			<ref name="7522801">Y. Li, M. Chen and J. Wang, "Introduction to side-channel attacks and fault attacks," 2016 Asia-Pacific International Symposium on Electromagnetic Compatibility (APEMC), 2016, pp. 573-575, doi: 10.1109/APEMC.2016.7522801.</ref>

	</references>		</references>

	[[Category:Basic]]		[[Category:Basic]]

SVrdoljak: /* Types of Side Channel Attacks */

2021-12-21T19:03:56Z

Types of Side Channel Attacks

← Older revision		Revision as of 19:03, 21 December 2021
Line 84:		Line 84:

	=== Fault-Injection Attacks ===		=== Fault-Injection Attacks ===
	The Fault-Injection Attacks is a attack where keys/secrets and sensitive information is "stolen" from cryptographic devices or systems by generating faults. Usually the attacker exploits a system that is more prone to being vulnerable due to its higher design complexity and incomplete verification. Voltage glitching, electromagnetic glitching or clock glitching are some of the ways a fault is generated. Fault-Injection Attacks are usually differential, because the output of a faulty operation is compared to a non-faulty operation.		The Fault-Injection Attacks is a attack where keys/secrets and sensitive information is "stolen" from cryptographic devices or systems by generating faults. Usually the attacker exploits a system that is more prone to being vulnerable due to its higher design complexity and incomplete verification. Voltage glitching, electromagnetic glitching or clock glitching are some of the ways a fault is generated. Fault-Injection Attacks are usually differential, because the output of a faulty operation is compared to a non-faulty operation.<ref name="7522801"/>

	=== Others ===		=== Others ===

SVrdoljak: /* Types of Side Channel Attacks */

2021-12-21T18:59:30Z

Types of Side Channel Attacks

← Older revision		Revision as of 18:59, 21 December 2021
Line 22:		Line 22:
	# Electromagnetic Attacks		# Electromagnetic Attacks
	# Power-Monitoring Attacks		# Power-Monitoring Attacks
			# Fault-Injection Attacks

	=== Timing Attacks ===		=== Timing Attacks ===
Line 81:		Line 82:

	The Template Power Analysis is a more advanced form of the Simple Power Analysis (SPA). The attacker characterises and saves known and recognized patterns in the power traces as templates. He then compares these templates with the power traces collected from the target device. In this way, he recognizes matches and therefore knows what operations were being carried out when the power traces were measured.<ref name="BT19"/><ref name="CRR03"/>		The Template Power Analysis is a more advanced form of the Simple Power Analysis (SPA). The attacker characterises and saves known and recognized patterns in the power traces as templates. He then compares these templates with the power traces collected from the target device. In this way, he recognizes matches and therefore knows what operations were being carried out when the power traces were measured.<ref name="BT19"/><ref name="CRR03"/>

			=== Fault-Injection Attacks ===
			The Fault-Injection Attacks is a attack where keys/secrets and sensitive information is "stolen" from cryptographic devices or systems by generating faults. Usually the attacker exploits a system that is more prone to being vulnerable due to its higher design complexity and incomplete verification. Voltage glitching, electromagnetic glitching or clock glitching are some of the ways a fault is generated. Fault-Injection Attacks are usually differential, because the output of a faulty operation is compared to a non-faulty operation.

	=== Others ===		=== Others ===

JFrost: Changed picture size, added references

2020-12-21T21:31:05Z

Changed picture size, added references

Show changes

JFrost: Added content for each heading

2020-12-21T20:52:13Z

Added content for each heading

Show changes

JFrost: initial design

2020-12-13T21:35:45Z

initial design

New page

== Summary==

== Introduction ==

== Types of side-channel attacks ==

=== Timing attacks ===

==== Cache-Timing Analysis ====

=== Electromagnetic attacks ===

==== Simple Electromagnetic Analysis ====

==== Differential Electromagnetic Analysis ====

=== Power-monitoring attacks ===

==== Simple Power Analysis ====

==== Differential Power Analysis ====

==== Correlation Power Analysis ====

==== Template Power Analysis ====

== Countermeasures ==

=== Masking ===

=== Hiding ===

== References ==