Fit the Joint Moments: How to Attack Any Masking Scheme - LIRMM - Laboratoire d’Informatique, de Robotique et de Microélectronique de Montpellier Accéder directement au contenu
Article Dans Une Revue IEEE Access Année : 2022

Fit the Joint Moments: How to Attack Any Masking Scheme

Résumé

Side-Channel Analysis (SCA) allows extracting secret keys manipulated by cryptographic primitives through leakages of their physical implementations. Supervised attacks, known to be optimal, can theoretically defeat any countermeasure, including masking, by learning the dependency between the leakage and the secret through the profiling phase. However, defeating masking is less trivial when it comes to unsupervised attacks. While classical strategies such as correlation power analysis or linear regression analysis have been extended to masked implementations, we show that these extensions only hold for Boolean and arithmetic schemes. Therefore, we propose a new unsupervised strategy, the Joint Moments Regression (JMR), able to defeat any masking schemes (multiplicative, affine, polynomial, inner product…), which are gaining popularity in real implementations. The main idea behind JMR is to directly regress the leakage model of the shares by fitting a system based on higher-order joint moments conditions. We show that this idea can be seen as part of a more general framework known as the Generalized Method of Moments (GMM). This offers mathematical foundations on which we rely to derive optimizations of JMR. Simulations results confirm the interest of JMR over state-of-the-art attacks, even in the case of Boolean and arithmetic masking. Eventually, we apply this strategy to real traces and provide, to the best of our knowledge, the first unsupervised attack on the protected AES implementation proposed by the ANSSI for SCA research, which embeds an affine masking and shuffling counter-measures.
Fichier principal
Vignette du fichier
2022-927_eprint.pdf (2.12 Mo) Télécharger le fichier

Dates et versions

lirmm-03895675 , version 1 (13-12-2022)

Licence

Paternité

Identifiants

Citer

Valence Cristiani, Maxime Lecomte, Thomas Hiscock, Philippe Maurine. Fit the Joint Moments: How to Attack Any Masking Scheme. IEEE Access, 2022, 10, pp.127412-127427. ⟨10.1109/ACCESS.2022.3222760⟩. ⟨lirmm-03895675⟩
16 Consultations
30 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More