Paper 2017/287

Towards Sound and Optimal Leakage Detection Procedure

Liwei Zhang, A. Adam Ding, Francois Durvaux, Francois-Xavier Standaert, and Yunsi Fei

Abstract

Evaluation of side channel leakage for the embedded crypto systems requires sound leakage detection procedures. We relate the test vector leakage assessment (TVLA) procedure to the statistical minimum p-value (mini-p) procedure, and propose a sound method of deciding leakage existence in the statistical hypothesis setting. To improve detection, an advanced statistical procedure Higher Criticism (HC) is applied. The detection of leakage existence and the identification of exploitable leakage are separated when there are multiple leakage points. For leakage detection, the HC-based procedure is shown to be optimal in that, for a given number of traces with given length, it detects existence of leakage at the signal level as low as possibly detectable by any statistical procedure. We provide theoretical proof of the optimality of the HC procedure. Numerical studies show that the HC-based procedure perform as well as the mini-p based procedure when leakage signals are very sparse, and can improve the leakage detection significantly when there are multiple leakages.

Note: ...

Metadata
Available format(s)
PDF
Publication info
Published elsewhere. Minor revision. CARDIS 2017
Keywords
Side channel analysisleakage detectionhigher criticism
Contact author(s)
a ding @ neu edu
History
2018-04-26: last of 5 revisions
2017-04-03: received
See all versions
Short URL
https://ia.cr/2017/287
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2017/287,
      author = {Liwei Zhang and A.  Adam Ding and Francois Durvaux and Francois-Xavier Standaert and Yunsi Fei},
      title = {Towards Sound and Optimal Leakage Detection Procedure},
      howpublished = {Cryptology {ePrint} Archive, Paper 2017/287},
      year = {2017},
      url = {https://eprint.iacr.org/2017/287}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.