Cryptology ePrint Archive: Report 2017/075

A First DFA on PRIDE: from Theory to Practice (extended version)

Benjamin Lac and Marc Beunardeau and Anne Canteaut and Jacques Fournier and Renaud Sirdey

Abstract: PRIDE is one of the most effcient lightweight block cipher proposed so far for connected objects with high performance and low resource constraints. In this paper we describe the first ever complete Differential Fault Analysis against PRIDE. We describe how fault attacks can be used against implementations of PRIDE to recover the entire encryption key. Our attack has been validated first through simulations, and then in practice on a software implementation of PRIDE running on a device that could typically be used in IoT devices. Faults have been injected using electromagnetic pulses during the PRIDE execution and the faulty ciphertexts have been used to recover the key bits. We also discuss some countermeasures that could be used to thwart such attacks.

Category / Keywords: implementation / cryptanalysis

Original Publication (with minor differences): To appear in the Proceedings of the 11th International Conference on Risks and Security of Internet and Systems

Date: received 1 Feb 2017

Contact author: renaud sirdey at gmail com

Available format(s): PDF | BibTeX Citation

Version: 20170203:185937 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]