Theoretical and practical aspects of multiple samples correlation power analysis. Issue 18 (27th October 2016)

• Record Type: Journal Article
• Authors: Zhang, Hailong; Zhou, Yongbin; Feng, Dengguo
• Is Part Of: Security and communication networks. Volume 9:Issue 18(2016)
• Page Start: 5166
• Page End: 5177
• Publication Date: 2016-10-27
• Subjects: correlation power analysis -- interesting points -- multiple samples correlation power analysis -- power analysis attacks; Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1686
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract: There is more than one sample in a power trace, corresponding to the process of the target intermediate value, which are known as interesting points. One can exploit the power leakages at multiple samples to recover the secret key used by the crypto device, and that is the idea of multiple samples correlation power analysis (MSCPA). Considering that the leakage exploitation of MSCPA is more efficient than that of correlation power analysis (CPA), the power of MSCPA should be stronger than that of CPA. We theoretically prove and practically verify this fact. Theoretically, we show the advantage of MSCPA over CPA in terms of the correct key distinguishing level. We show that compared with CPA, MSCPA enlarges the gap between the correlation coefficient computed under the correct key and the correlation coefficients computed under wrong key guesses, which makes the correct key easier to be distinguished. Practically, we evaluate the performance of MSCPA in real scenarios. Using power traces provided by DPA Contest v2 and v4.1, we compare the key‐recovery efficiency of MSCPA with that of CPA. Experimental results show that compared with CPA, MSCPA can reach a higher key‐recovery efficiency in the same scenario. Copyright © 2016 John Wiley & Sons, Ltd. Abstract : In this paper, we first theoretically show the advantage of multiple samples correlation power analysis over correlation power analysis in terms of the correct key distinguishing level; then, using power traces provided by DPA Contest v2 and v4.1, we practically show the advantage of multiple samples correlation power analysis over correlation power analysis in terms of the key‐recovery efficiency.