Portability of templates
Résumé
Template attacks consist of two stages: a profiling and a matching step.
This way of attacking a circuit can be shown to be optimal when the profiling exactly describes the side-channel leakage of the circuit to be attacked.
On the contrary, this article focuses on identifying the problems that arise when there is a discrepancy between the templates and the traces to match.
Based on a real-world case-study, we show that two phenomena can hinder the success of template attacks when the precharacterized templates are outdated:
the traces can be desynchronized and the amplitudes can be scaled differently.
We observe that the consequence of these distortions can be as dramatic as ranking the correct key last, which is the worst degradation possible for a side-channel distinguisher; Since an attacker is usually interested in the first keys in the rankings.
Then we suggest two ways to correct the templates mismatches: waveform realignment and acquisition campaigns normalization.
After this processing, it appears that the template attacks almost do not loose any efficiency in terms of success rate and guessing entropy with respect to an attack with ideal templates.
Domaines
Cryptographie et sécurité [cs.CR]Origine | Fichiers produits par l'(les) auteur(s) |
---|---|
Licence |
Domaine public
|