Cryptology ePrint Archive: Report 2007/480

Differential Fault Analysis on the AES Key Schedule

Junko Takahashi and Toshinori Fukunaga

Abstract: This letter proposes a differential fault analysis on the AES key schedule and shows how an entire 128-bit AES key can be retrieved. In the workshop at FDTC 2007, we presented the DFA mechanism on the AES key schedule and proposed general attack rules. Using our proposed rules, we showed an efficient attack that can retrieve 80 bits of the 128-bit key. Recently, we have found a new attack that can obtain an additional 8 bits compared with our previous attack. As a result, we present most efficient attack for retrieving 88 bits of the 128-bit key using approximately two pairs of correct and faulty ciphertexts.

Category / Keywords: secret-key cryptography / DFA, AES, Side Channel Analysis

Date: received 27 Dec 2007

Contact author: takahashi junko at lab ntt co jp

Available formats: PDF | BibTeX Citation

Version: 20071228:045139 (All versions of this report)

Discussion forum: Show discussion | Start new discussion