Side-Channel Expectation-Maximization Attacks - Equipe Secure and Safe Hardware Accéder directement au contenu
Article Dans Une Revue IACR Transactions on Cryptographic Hardware and Embedded Systems Année : 2022

Side-Channel Expectation-Maximization Attacks

Résumé

Block ciphers are protected against side-channel attacks by masking. On one hand, when the leakage model is unknown, second-order correlation attacks are typically used. On the other hand, when the leakage model can be profiled, template attacks are prescribed. But what if the profiled model does not exactly match that of the attacked device? One solution consists in regressing on-the-fly the scaling parameters from the model. In this paper, we leverage an Expectation-Maximization (EM) algorithm to implement such an attack. The resulting unprofiled EM attack, termed U-EM, is shown to be both efficient (in terms of number of traces) and effective (computationally speaking). Based on synthetic and real traces, we introduce variants of our U-EM attack to optimize its performance, depending on trade-offs between model complexity and epistemic noise. We show that the approach is flexible, in that it can easily be adapted to refinements such as different points of interest and number of parameters in the leakage model.
Fichier principal
Vignette du fichier
202206beguinotchengguilleyrioul.pdf (1.56 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03718805 , version 1 (12-08-2022)

Identifiants

Citer

Julien Béguinot, Wei Cheng, Sylvain Guilley, Olivier Rioul. Side-Channel Expectation-Maximization Attacks. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022, 2022 (4), pp.774-799. ⟨10.46586/tches.v2022.i4.774-799⟩. ⟨hal-03718805⟩
386 Consultations
130 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More