Template attacks with partial profiles and Dirichlet priors: Application to timing attacks
Résumé
In order to retrieve the secret key in a side-channel attack, the attacker computes distinguisher values using all the available data. A profiling stage is very useful to provide some a priori information about the leakage model. However, profiling is essentially empirical and may not be exhaustive. Therefore, during the attack, the attacker may come up on previously unseen data, which can be troublesome. A lazy workaround is to ignore all such novel observations altogether. In this paper, we show that this is not optimal and can be avoided. Our proposed techniques eventually improve the performance of classical information-theoretic distinguishers in terms of success rate.
Domaines
Cryptographie et sécurité [cs.CR] Théorie de l'information et codage [math.IT] Mathématiques générales [math.GM] Théorie de l'information [cs.IT] Mathématique discrète [cs.DM] Interface homme-machine [cs.HC] Traitement du signal et de l'image [eess.SP] Traitement du signal et de l'image [eess.SP] Statistiques [math.ST] Probabilités [math.PR] Analyse fonctionnelle [math.FA] Analyse classique [math.CA]| Origine | Fichiers produits par l'(les) auteur(s) |
|---|