2020Unpublished venueRequires access

First-Round and Last-Round Power Analysis Attack Against AES Devices

Septafiansyah Dwi Putra, Arwin Datumaya Wahyudi Sumari, Imam Asrowardi, Eko Subyantoro, Luqman Muhammad Zagi

Open publisher page 4 citations

Abstract

Power analysis attacks are a known method of breaking cryptographic algorithms such as AES. The scenario is a first-round and last-round attack based on CPA and hamming distance, each of which provides candidates for 16 secret state key. This paper demonstrates a series of attacks on a secure AES microcontroller device, where the f rmware f les have been encrypted with AES128 EBC. A correlation power analysis (CPA) attack is performed on AES128 to recover the complete master key. The use of CPA attacks is carried out on the first-byte state at First- Round and Last-Round. The correlation coefficient for the entire state in AES in the first-round is 0.712 <<0.8455. Meanwhile, the coefficient value in the second test is 0.1724 <<0.2635. We can conclude the main vulnerability of the AES128 is in the power estimate value that is easy to guess after the SubBytes and INVSubbytes function in each round.

About this research paper

What this paper is about

Power analysis attacks are a known method of breaking cryptographic algorithms such as AES. The scenario is a first-round and last-round attack based on CPA and hamming distance, each of which provides candidates for 16 secret state key. This paper demonstrates a series of attacks on a secure AES microcontroller device, where the f rmware f les have been encrypted with AES128 EBC. A correlation power analysis (CPA) attack is performed on AES128 to recover the complete master key. The use of CPA attacks is carried out on the first-byte state at First- Round and Last-Round. The correlation coefficient for the entire state in AES in the first-round is 0.712 <<0.8455. Meanwhile, the coefficient value in the second test is 0.1724 <<0.2635. We can conclude the main vulnerability of the AES128 is in the power estimate value that is easy to guess after the SubBytes and INVSubbytes function in each round.

Why it matters

OpenAlex reports 4 citations for this work. Citation counts describe recorded attention and do not establish research quality.

Key contribution

A contribution statement is not available in the OpenAlex record.

Method / approach

Method details are not available in the OpenAlex metadata.

Main findings

Findings are not separately available in the OpenAlex metadata.

Limitations

Limitations are not available in the OpenAlex metadata.

Applications

Application details are not available in the OpenAlex metadata.

Available abstract

Power analysis attacks are a known method of breaking cryptographic algorithms such as AES. The scenario is a first-round and last-round attack based on CPA and hamming distance, each of which provides candidates for 16 secret state key. This paper demonstrates a series of attacks on a secure AES microcontroller device, where the f rmware f les have been encrypted with AES128 EBC. A correlation power analysis (CPA) attack is performed on AES128 to recover the complete master key. The use of CPA attacks is carried out on the first-byte state at First- Round and Last-Round. The correlation coefficient for the entire state in AES in the first-round is 0.712 <<0.8455. Meanwhile, the coefficient value in the second test is 0.1724 <<0.2635. We can conclude the main vulnerability of the AES128 is in the power estimate value that is easy to guess after the SubBytes and INVSubbytes function in each round.

Key concepts: Power analysis, Cryptography, Computer science, Advanced Encryption Standard, Hamming weight, Encryption, Correlation attack, Byte

Related papers

Back to paper searchBrowse research topicsOriginal source
First-Round and Last-Round Power Analysis Attack Against AES Devices — Research Paper | ScholarLens