A cautionary note regarding evaluation of AES candidates on smart-cards (1999) [29 citations — 0 self]
Popular Tags
No tags have been applied to this document.
BibTeX | Add To MetaCart
@INPROCEEDINGS{Chari99acautionary,author = {Suresh Chari and Charanjit Jutla and Josyula R. Rao and Pankaj Rohatgi},
title = {A cautionary note regarding evaluation of AES candidates on smart-cards},
booktitle = {In 2nd Advanced Encryption Standard Candidate Conference},
year = {1999},
pages = {133--147}
}
Years of Citing Articles
Abstract:
NIST has considered the performance of AES candidates on smart-cards as an important selection criterion and many submitters have highlighted the compactness and e ciency of their submission on low end smart cards. However, in light of recently discovered power based attacks, we strongly argue that evaluating smart-card suitability of AES candidates requires a very cautious approach. We demonstrate that straightforward implementations of AES candidates on smart cards, are highly vulnerable to power analysis and readily leak away all secret keys. To illustrate our point, we describe a power based attack on the Two sh Reference 6805 code which we implemented on a ST16 smart card. The attack required power samples from only 100 independent block encryptions to fully recover the 128-bit secret key. We also describe how all other AES candidates are susceptible to similar attacks. We review the basis of power attacks and suggest countermeasures for a secure implementation. Unfortunately, it appears that these software countermeasures result in signi cant memory and e ciency overhead and therefore the most e cient smart card implementation cannot serve as a guide in evaluating AES candidates. Keywords: Smart-Cards, Power Analysis, AES Candidates, AES Evaluation Criterion. 1
Citations
| 265 | signatures for untraceable payments – Chaum - 1983 |
| 196 | Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems – Kocher - 1996 |
| 42 | Introduction to Differential Power Analysis and Related Attacks – Kocher, Jaffe, et al. - 1998 |
| 29 | Timing attacks on implementations of Die-Hellman, RSA, DSS, and other systems – Kocher - 1996 |
| 11 | Introduction to Di#erential Power Analysis and Related Attacks – Kocher, Jae, et al. - 1998 |
| 3 | Performance Comparison of the AES Submissions", http://www.counterpane.com/aesperformance.html – Schneier, Kelsey, et al. |
| 1 | Status of the Advanced Encryption Standard (AES) Development E ort – Foti - 1998 |
| 1 | Two sh: A 128-Bit Block Cipher". http://www.counterpane.com/two sh-paper.html – Schneier, Kesley, et al. |
| 1 | Twofish: A 128-Bit Block Cipher". http://www.counterpane.com/twofish-paper.html – Schneier, Kesley, et al. |
