Paper 2013/294

Synchronous Sampling and Clock Recovery of Internal Oscillators for Side Channel Analysis

Colin O'Flynn and Zhizhang (David) Chen


Measuring power consumption for side-channel analysis typically uses an oscilloscope, which measures the data relative to an internal sample clock. By synchronizing the sampling clock to the clock of the target device, the sample rate requirements are considerably relaxed; the attack will succeed with a much lower sample rate. This work measures the performance of a synchronous sampling system attacking a modern microcontroller running a software AES implementation. This attack is characterized under four conditions: with a stable crystal-oscillator based clock, with a clock that is randomly varied between 3.9 MHz - 13 MHz, with an internal oscillator that is randomly varied between 7.2 MHz - 8.1 MHz, and with an internal oscillator that has slight random variation due to natural `drift' in the oscillator. Traces captured with the synchronous sampling technique can be processed with a standard Differential Power Analysis (DPA) style attack in all four cases, whereas when an oscilloscope is used only the stable oscillator setup is successful. This work also develops the hardware to recover the internal clock of a device which does not have an externally available clock. It is possible to implement this scheme in software only, allowing it to work with existing oscilloscope-based test environments.

Note: Update PDF to fix small errors, add note that final version will be available on

Available format(s)
Publication info
Published elsewhere. Journal of Cryptographic Engineering (JCEN)
side-channel analysisacquisitionsynchronizationDPA
Contact author(s)
coflynn @ newae com
2014-10-20: last of 6 revisions
2013-05-23: received
See all versions
Short URL
Creative Commons Attribution


      author = {Colin O'Flynn and Zhizhang (David) Chen},
      title = {Synchronous Sampling and Clock Recovery of Internal Oscillators for Side Channel Analysis},
      howpublished = {Cryptology ePrint Archive, Paper 2013/294},
      year = {2013},
      doi = {10.1007/s13389-014-0087-5},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.