Design and characterisation of an AES chip embedding countermeasures

Michel Agoyan (1, 2) , Sylvain Bouquet (1, 2) , Jean-Max Dutertre (2) , Jacques Jean-Alain Fournier (1, 2) , Jean-Baptiste Rigaud (2) , Bruno Robisson (1, 2) , Assia Tria (1, 2)

1 CMP-ENSMSE - Centre Microélectronique de Provence - Site Georges Charpak (CMP-GC)
2 SAS-ENSMSE - Département Systèmes et Architectures Sécurisés

In critical communication infrastructures, hardware accelerators are often used to speed up cryptographic calculations. Their resistance to physical attacks determines how secure the overall infrastructure is. In this paper, we describe the implementation and characterisation of an AES accelerator embedding security features against physical attacks. This AES chip is implemented in HCMOS9gp 130nm STM technology. The countermeasure is based on duplication and works on complemented values in parallel. The chip was tested against side-channel attacks showing the efficiency of the proposed countermeasure against such attacks. Fault injection tests based on the use of local laser shoots showed that the fault detection mechanism did indeed react as expected. However, using clock set-up time violations, 80% of the secret key were retrieved in less than 40 hours, thus illustrating the limits of the duplication countermeasure against a global fault attack which was published after the chip was designed.

Mots clés: Advanced Encryption Standard; Side channel analysis; Circuit duplication; detection and propagation; Fault injection

Domaines: Cryptographie et sécurité [cs.CR]; Micro et nanotechnologies/Microélectronique

Michel Agoyan, Sylvain Bouquet, Jean-Max Dutertre, Jacques Jean-Alain Fournier, Jean-Baptiste Rigaud, et al.. Design and characterisation of an AES chip embedding countermeasures. International Journal of Intelligent Engineering Informatics, 2011, 3/4, pp.328-347. ⟨emse-00624400⟩