Cryptology ePrint Archive: Report 2016/517

ELMO: Emulating Leaks for the ARM Cortex-M0 without Access to a Side Channel Lab

David McCann and Carolyn Whitnall and Elisabeth Oswald

Abstract: Power (along with EM, cache and timing) leaks are of considerable concern for developers who have to deal with cryptographic components as part of their overall software implementation, in particular in the context of embedded devices. Whilst there exist some compiler tools to detect timing leaks, similar progress towards pinpointing power and EM leaks has been hampered by limits on the amount of information available about the physical components from which such leaks originate.

We suggest a novel modelling technique capable of producing high-quality instruction-level power (and/or EM) models without requiring a detailed hardware description of a processor nor information about the used process technology (access to both of which is typically restricted). We show that our methodology is effective at capturing differential data-dependent effects as neighbouring instructions in a sequence vary. We also explore register effects, and verify our models across several measurement boards to comment on board effects and portability. We confirm its versatility by demonstrating the basic technique on two processors (the ARM Cortex-M0 and M4), and use the M0 models to develop ELMO, the first leakage simulator for the ARM Cortex M0.

Category / Keywords: leakage, evaluation, side-channel, embedded systems

Date: received 26 May 2016, last revised 17 Mar 2017

Contact author: david mccann at bristol ac uk

Available format(s): PDF | BibTeX Citation

Note: Updated version of paper.

Version: 20170317:154146 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]