Cryptology ePrint Archive: Report 2009/449

One for All - All for One: Unifying Standard DPA Attacks

Stefan Mangard and Elisabeth Oswald and Francois-Xavier Standaert

Abstract: In this paper, we examine the relationship between and the efficiency of different approaches to standard (univariate) DPA attacks. We first show that, when feeded with the same assumptions about the target device (i.e. with the same leakage model), the most popular approaches such as using a distance-of-means test, correlation analysis, and Bayes attacks are essentially equivalent in this setting. Differences observed in practice are not due to differences in the statistical tests but due to statistical artifacts. Then, we establish a link between the correlation coefficient and the conditional entropy in side-channel attacks. In a first-order attack scenario, this relationship allows linking currently used metrics to evaluate standard DPA attacks (such as the number of power traces needed to perform a key recovery) with an information theoretic metric (the mutual information). Our results show that in the practical scenario defined formally in this paper, both measures are equally suitable to compare devices in respect to their susceptibility to DPA attacks. Together with observations regarding key and algorithm independence we consequently extend theoretical strategies for the sound evaluation of leaking devices towards the practice of side-channel attacks.

Category / Keywords: implementation / side-channel attacks

Publication Info: To appear in IET Information Security

Date: received 13 Sep 2009, last revised 3 Jan 2011

Contact author: fstandae at uclouvain be

Available format(s): Postscript (PS) | Compressed Postscript (PS.GZ) | PDF | BibTeX Citation

Version: 20110103:094153 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]