CC meets FIPS : a hybrid test methodology for first order side channel analysis
Common Criteria (CC) and FIPS 140-3 are two popular side channel testing methodologies. Test Vector Leakage Assessment Methodology (TVLA), a potential candidate for FIPS, can detect the presence of side-channel information in leakage measurements. However, TVLA results cannot be used to quantify sid...
| Main Authors: | , , , , , |
|---|---|
| Format: | Journal Article |
| Language: | English |
| Published: |
2020
|
| Subjects: | |
| Online Access: | https://hdl.handle.net/10356/144640 |
| _version_ | 1824454947052191744 |
|---|---|
| author | Roy, Debapriya Basu Bhasin, Shivam Guilley, Sylvain Heuser, Annelie Patranabis, Sikhar Mukhopadhyay, Debdeep |
| author_facet | Roy, Debapriya Basu Bhasin, Shivam Guilley, Sylvain Heuser, Annelie Patranabis, Sikhar Mukhopadhyay, Debdeep |
| author_sort | Roy, Debapriya Basu |
| collection | NTU |
| description | Common Criteria (CC) and FIPS 140-3 are two popular side channel testing methodologies. Test Vector Leakage Assessment Methodology (TVLA), a potential candidate for FIPS, can detect the presence of side-channel information in leakage measurements. However, TVLA results cannot be used to quantify side-channel vulnerability and it is an open problem to derive its relationship with side channel attack success rate (SR), i.e., a common metric for CC. In this paper, we extend the TVLA testing beyond its current scope. Precisely, we derive a concrete relationship between TVLA and signal to noise ratio (SNR). The linking of the two metrics allows direct computation of success rate (SR) from TVLA for given choice of intermediate variable and leakage model and thus unify these popular side channel detection and evaluation metrics. An end-to-end methodology is proposed, which can be easily automated, to derive attack SR starting from TVLA testing. The methodology works under both univariate and multivariate setting and is capable of quantifying any first order leakage. Detailed experiments have been provided using both simulated traces and real traces on SAKURA-GW platform. Additionally, the proposed methodology is benchmarked against previously published attacks on DPA contest v4.0 traces, followed by extension to jitter based countermeasure. The result shows that the proposed methodology provides a quick estimate of SR without performing actual attacks, thus bridging the gap between CC and FIPS. |
| first_indexed | 2025-02-19T03:30:24Z |
| format | Journal Article |
| id | ntu-10356/144640 |
| institution | Nanyang Technological University |
| language | English |
| last_indexed | 2025-02-19T03:30:24Z |
| publishDate | 2020 |
| record_format | dspace |
| spelling | ntu-10356/1446402020-11-21T20:12:25Z CC meets FIPS : a hybrid test methodology for first order side channel analysis Roy, Debapriya Basu Bhasin, Shivam Guilley, Sylvain Heuser, Annelie Patranabis, Sikhar Mukhopadhyay, Debdeep Engineering::Civil engineering Side Channel Evaluation Based Testing Common Criteria (CC) and FIPS 140-3 are two popular side channel testing methodologies. Test Vector Leakage Assessment Methodology (TVLA), a potential candidate for FIPS, can detect the presence of side-channel information in leakage measurements. However, TVLA results cannot be used to quantify side-channel vulnerability and it is an open problem to derive its relationship with side channel attack success rate (SR), i.e., a common metric for CC. In this paper, we extend the TVLA testing beyond its current scope. Precisely, we derive a concrete relationship between TVLA and signal to noise ratio (SNR). The linking of the two metrics allows direct computation of success rate (SR) from TVLA for given choice of intermediate variable and leakage model and thus unify these popular side channel detection and evaluation metrics. An end-to-end methodology is proposed, which can be easily automated, to derive attack SR starting from TVLA testing. The methodology works under both univariate and multivariate setting and is capable of quantifying any first order leakage. Detailed experiments have been provided using both simulated traces and real traces on SAKURA-GW platform. Additionally, the proposed methodology is benchmarked against previously published attacks on DPA contest v4.0 traces, followed by extension to jitter based countermeasure. The result shows that the proposed methodology provides a quick estimate of SR without performing actual attacks, thus bridging the gap between CC and FIPS. Accepted version 2020-11-16T09:18:56Z 2020-11-16T09:18:56Z 2018 Journal Article Roy, D. B., Bhasin, S., Guilley, S., Heuser, A., Patranabis, S., & Mukhopadhyay, D. (2019). CC meets FIPS : a hybrid test methodology for first order side channel analysis. IEEE Transactions on Computers, 68(3), 347-361. doi:10.1109/tc.2018.2875746 0018-9340 https://hdl.handle.net/10356/144640 10.1109/TC.2018.2875746 3 68 347 361 en IEEE Transactions on Computers © 2018 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works. The published version is available at: https://doi.org/10.1109/TC.2018.2875746. application/pdf |
| spellingShingle | Engineering::Civil engineering Side Channel Evaluation Based Testing Roy, Debapriya Basu Bhasin, Shivam Guilley, Sylvain Heuser, Annelie Patranabis, Sikhar Mukhopadhyay, Debdeep CC meets FIPS : a hybrid test methodology for first order side channel analysis |
| title | CC meets FIPS : a hybrid test methodology for first order side channel analysis |
| title_full | CC meets FIPS : a hybrid test methodology for first order side channel analysis |
| title_fullStr | CC meets FIPS : a hybrid test methodology for first order side channel analysis |
| title_full_unstemmed | CC meets FIPS : a hybrid test methodology for first order side channel analysis |
| title_short | CC meets FIPS : a hybrid test methodology for first order side channel analysis |
| title_sort | cc meets fips a hybrid test methodology for first order side channel analysis |
| topic | Engineering::Civil engineering Side Channel Evaluation Based Testing |
| url | https://hdl.handle.net/10356/144640 |
| work_keys_str_mv | AT roydebapriyabasu ccmeetsfipsahybridtestmethodologyforfirstordersidechannelanalysis AT bhasinshivam ccmeetsfipsahybridtestmethodologyforfirstordersidechannelanalysis AT guilleysylvain ccmeetsfipsahybridtestmethodologyforfirstordersidechannelanalysis AT heuserannelie ccmeetsfipsahybridtestmethodologyforfirstordersidechannelanalysis AT patranabissikhar ccmeetsfipsahybridtestmethodologyforfirstordersidechannelanalysis AT mukhopadhyaydebdeep ccmeetsfipsahybridtestmethodologyforfirstordersidechannelanalysis |