DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc...

17
DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage. Institut T´ el´ ecom / el´ ecom ParisTech CNRS LTCI (UMR 5141) CHES 2014 rump session September 25, 2014 — Busan, South Korea. Sylvain Guilley DPA contests V4.x

Transcript of DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc...

Page 1: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

DPA contests: from V4 to V4.x !!!

Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc,Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent

Sauvage.

Institut Telecom / Telecom ParisTechCNRS – LTCI (UMR 5141)

CHES 2014 rump sessionSeptember 25, 2014 — Busan, South Korea.

Sylvain Guilley DPA contests V4.x

Page 2: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Sylvain Guilley DPA contests V4.x

Page 3: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Sylvain Guilley DPA contests V4.x

Page 4: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Sylvain Guilley DPA contests V4.x

Page 5: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Thank you!

Overall, 30 participations!!!

73% from academia ; 17% from gvt agencies ; 10% fromindustry

From 10 countries: CN, KR, CZ, JP, BE, GE, IL, FR, BY, SG

Sylvain Guilley DPA contests V4.x

Page 6: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Thank you!Overall, 30 participations!!!

73% from academia ; 17% from gvt agencies ; 10% fromindustry

From 10 countries: CN, KR, CZ, JP, BE, GE, IL, FR, BY, SG

Sylvain Guilley DPA contests V4.x

Page 7: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Thank you!Overall, 30 participations!!!

73% from academia ; 17% from gvt agencies ; 10% fromindustry

From 10 countries: CN, KR, CZ, JP, BE, GE, IL, FR, BY, SG

Sylvain Guilley DPA contests V4.x

Page 8: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

............

Sylvain Guilley DPA contests V4.x

Page 9: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Used techniques

Neural networks, SVM

Clustering, K-means

F-test, Filtering

...

Dissemination

CARDIS

CHES (thanks Ofir Weisse!)

COSADE

HASP

SPACE

WESS

...

Sylvain Guilley DPA contests V4.x

Page 10: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Used techniques

Neural networks, SVM

Clustering, K-means

F-test, Filtering

...

Dissemination

CARDIS

CHES (thanks Ofir Weisse!)

COSADE

HASP

SPACE

WESS

...

Sylvain Guilley DPA contests V4.x

Page 11: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Winners!

Profiled

Frank Schuhmacher . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1.0 trace!

Template matrices for each sbox index, with pre-whiteningand a projection to the first 10 principal components of thesignal covariance matrix.

Segrids, Germany

Non-profiled

Yongbin Zhou, Lin Meng, Hailong Zhang, YingxianZheng, Mingliang Feng . . . . . . . . . . . . . . . . . . . . . . . .12.0 trace!

State Key Laboratory of Information Security, Institute ofInformation Engineering, Chinese Academy of Sciences, China

1st order CPA attack II

Sylvain Guilley DPA contests V4.x

Page 12: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Winners!

Profiled

Frank Schuhmacher . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1.0 trace!

Template matrices for each sbox index, with pre-whiteningand a projection to the first 10 principal components of thesignal covariance matrix.

Segrids, Germany

Non-profiled

Yongbin Zhou, Lin Meng, Hailong Zhang, YingxianZheng, Mingliang Feng . . . . . . . . . . . . . . . . . . . . . . . .12.0 trace!

State Key Laboratory of Information Security, Institute ofInformation Engineering, Chinese Academy of Sciences, China

1st order CPA attack II

Sylvain Guilley DPA contests V4.x

Page 13: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Winners!

Profiled

Frank Schuhmacher . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1.0 trace!

Template matrices for each sbox index, with pre-whiteningand a projection to the first 10 principal components of thesignal covariance matrix.

Segrids, Germany

Non-profiled

Yongbin Zhou, Lin Meng, Hailong Zhang, YingxianZheng, Mingliang Feng . . . . . . . . . . . . . . . . . . . . . . . .12.0 trace!

State Key Laboratory of Information Security, Institute ofInformation Engineering, Chinese Academy of Sciences, China

1st order CPA attack II

Sylvain Guilley DPA contests V4.x

Page 14: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

What is next?

DPA contest v4.2

Atmel ATMega-163 smart card

Shuffling

Fully written in ASM

Register transfers checked carefully

=⇒ http://www.dpacontest.org/v4/42_doc.php

Sylvain Guilley DPA contests V4.x

Page 15: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Sylvain Guilley DPA contests V4.x

Page 16: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

Sylvain Guilley DPA contests V4.x

Page 17: DPA contests: from V4 to V4.x · DPA contests: from V4 to V4.x !!! Nicolas Bruneau, Jean-Luc Danger, Guillaume Duc, Sylvain Guilley, Annelie Heuser, Zakaria Najm, Laurent Sauvage.

What is next?

DPA contest v4.3

Tim Guneysu and Amir Moradi

Generic Side-Channel Countermeasures for ReconfigurableDevices

CHES 2011

Sylvain Guilley DPA contests V4.x