Implementation flaws in the masking scheme of DPA Contest v4. (1st November 2017)

• Record Type: Journal Article
• Authors: Veshchikov, Nikita; Guilley, Sylvain
• Is Part Of: IET information security. Volume 11:Number 6(2017)
• Page Start: 356
• Page End: 362
• Publication Date: 2017-11-01
• Subjects: cryptography; implementation flaws -- DPA Contest v4 -- differential power analysis contest -- advanced encryption standard -- side‐channel attacks -- RSM countermeasure -- side‐channel attack -- AES‐RSM; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2016.0475
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : This study presents an implementation flaw in Differential Power Analysis Contest (DPA) Contest v4. This version of DPA Contest uses Advanced Encryption Standard (AES) protected against side‐channel attacks using rotating s‐box masking (RSM) countermeasure. The authors identify a flaw in the masking scheme that was used in this contest. More specifically, the problem lies in an unfortunate choice of values for masks. An unbalance in the masking scheme leads to a first order leakage. This vulnerability could be used in order to mount a first order side‐channel attack against AES‐RSM. The attack was implemented and tested on DPA Contest v4 reference traces. The authors also provide a way to avoid the newly discovered problem and suggest new values for masks.