A DFA on AES based on the entropy of error distributions

Ronan Lashermes (1, 2) , Guillaume Reymond (1, 2) , Jean-Max Dutertre (2, 1) , Jacques Jean-Alain Fournier (1, 2) , Bruno Robisson (1, 2) , Assia Tria (1, 2)

1 CEA-LETI - Commissariat à l'énergie atomique et aux énergies alternatives - Laboratoire d'Electronique et de Technologie de l'Information
2 SAS-ENSMSE - Département Systèmes et Architectures Sécurisés

Differential fault analysis (DFA) techniques have been widely studied during the past decade. To our best knowledge, most DFA techniques on the Advanced Encryption Standard (AES) either impose strong constraints on the fault injection process or require numerous faults in order to recover the secret key. This article presents a simple methodology based on information theory which allows to adapt the number of required faults for the analysis to the fault injection process. With this technique, the constraints on the fault model to recover the last round key are considerably lowered. Additionally, entropy is proposed as a tool to apprehend the most complex fault models in DFA. A practical realization and simulations are presented to illustrate our methodology.

Mots clés: Electromagnetic Fault injection; Electromagnetic Pulse; AES; DFA; FPGA; MCU.; MCU

Domaines: Micro et nanotechnologies/Microélectronique; Cryptographie et sécurité [cs.CR]

Ronan Lashermes, Guillaume Reymond, Jean-Max Dutertre, Jacques Jean-Alain Fournier, Bruno Robisson, et al.. A DFA on AES based on the entropy of error distributions. FDTC 2012, Sep 2012, Leuven, Belgium. pp.34. ⟨emse-00742642⟩