Reduction in the Number of Fault Injections for Blind Fault Attack on SPN Block Ciphers

Yang Li; Mengting Chen; Zhe Liu; Jian Wang

doi:10.1145/3014583

Reduction in the Number of Fault Injections for Blind Fault Attack on SPN Block Ciphers

ACM Transactions on Embedded Computing Systems ◽

10.1145/3014583 ◽

2017 ◽

Vol 16 (2) ◽

pp. 1-20 ◽

Cited By ~ 1

Author(s):

Yang Li ◽

Mengting Chen ◽

Zhe Liu ◽

Jian Wang

Keyword(s):

Block Ciphers ◽

Fault Attack ◽

Blind Fault

Download Full-text

Blind Fault Attack against SPN Ciphers

2014 Workshop on Fault Diagnosis and Tolerance in Cryptography ◽

10.1109/fdtc.2014.19 ◽

2014 ◽

Cited By ~ 7

Author(s):

Roman Korkikian ◽

Sylvain Pelissier ◽

David Naccache

Keyword(s):

Fault Attack ◽

Blind Fault

Download Full-text

Persistent Fault Analysis on Block Ciphers

IACR Transactions on Cryptographic Hardware and Embedded Systems ◽

10.46586/tches.v2018.i3.150-172 ◽

2018 ◽

pp. 150-172 ◽

Cited By ~ 3

Author(s):

Fan Zhang ◽

Xiaoxuan Lou ◽

Xinjie Zhao ◽

Shivam Bhasin ◽

Wei He ◽

...

Keyword(s):

Time Synchronization ◽

Fault Injection ◽

Block Ciphers ◽

Fault Analysis ◽

Experimental Results ◽

Fault Attacks ◽

Intrinsic Nature ◽

Fault Attack ◽

Modular Redundancy

Persistence is an intrinsic nature for many errors yet has not been caught enough attractions for years. In this paper, the feature of persistence is applied to fault attacks, and the persistent fault attack is proposed. Different from traditional fault attacks, adversaries can prepare the fault injection stage before the encryption stage, which relaxes the constraint of the tight-coupled time synchronization. The persistent fault analysis (PFA) is elaborated on different implementations of AES-128, specially fault hardened implementations based on Dual Modular Redundancy (DMR). Our experimental results show that PFA is quite simple and efficient in breaking these typical implementations. To show the feasibility and practicability of our attack, a case study is illustrated on the shared library Libgcrypt with rowhammer technique. Approximately 8200 ciphertexts are enough to extract the master key of AES-128 when PFA is applied to Libgcrypt1.6.3 with redundant encryption based DMR. This work puts forward a new direction of fault attacks and can be extended to attack other implementations under more interesting scenarios.

Download Full-text