A diagonal fault attack on the advanced encryption standard

D Saha, D Mukhopadhyay… - Cryptology ePrint …, 2009 - eprint.iacr.org
Cryptology ePrint Archive, 2009eprint.iacr.org
The present paper develops an attack on the AES algorithm, exploiting multiple byte faults in
the state matrix. The work shows that inducing a random fault anywhere in one of the four
diagonals of the state matrix at the input of the eighth round of the cipher leads to the
deduction of the entire AES key. We also propose a more generalized fault attack which
works if the fault induction does not stay confined to one diagonal. To the best of our
knowledge, we present for the first time actual chip results for a fault attack on an iterative …
Abstract
The present paper develops an attack on the AES algorithm, exploiting multiple byte faults in the state matrix. The work shows that inducing a random fault anywhere in one of the four diagonals of the state matrix at the input of the eighth round of the cipher leads to the deduction of the entire AES key. We also propose a more generalized fault attack which works if the fault induction does not stay confined to one diagonal. To the best of our knowledge, we present for the first time actual chip results for a fault attack on an iterative AES hardware running on a Xilinx FPGA platform. We show that when the fault stays within a diagonal, the AES key can be deduced with a brute force complexity of approximately , which was successfully performed in about seconds on an Intel Xeon Server with cores. We show further that even if the fault induction corrupts two or three diagonals, and faulty ciphertexts are necessary to uniquely identify the correct key.
eprint.iacr.org
以上显示的是最相近的搜索结果。 查看全部搜索结果