On the optimality of mutual information analysis for discrete leakages - Télécom Paris Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

On the optimality of mutual information analysis for discrete leakages

Résumé

Recent works investigated mutual information analysis (MIA) as a generic distinguisher for which the attack does not require specific information about the leakage model of the attacked device. We give a theoretical proof that MIA can be optimal in the absence of profiling, in the sense that it maximizes the empirical likelihood estimated on line from the data with a specific prediction function when no specific information about the model is known. We recover the earlier result that a non-injective prediction function is required for success. We also propose new strategies for estimating conditional entropy and mutual information using fast algorithms with shared cumulative data counts. Finally, we investigate discrete leakage models and identify various optimal exploitation strategies. In one of them, it is proved that MIA outperforms CPA. Similar schemes can be relevant in the real world, such as web side-channels where transmitted packets’ sizes and arrival times leak information.
201506cheriseyheuserguilleyrioul-slides.pdf (871.5 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-02300011 , version 1 (10-08-2022)

Identifiants

  • HAL Id : hal-02300011 , version 1

Citer

Eloi De Cherisey, Annelie Heuser, Sylvain Guilley, Olivier Rioul. On the optimality of mutual information analysis for discrete leakages. 13th International Workshop on Cryptographic Architectures Embedded in Reconfigurable Devices (CryptArchi 2015), Jun 2015, Leuven, Belgium. ⟨hal-02300011⟩
79 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More