Paper 2018/498

Modeling Soft Analytical Side-Channel Attacks from a Coding Theory Viewpoint

Qian Guo, Vincent Grosso, François-Xavier Standaert, and Olivier Bronchain


One important open question in side-channel analysis is to find out whether all the leakage samples in an implementation can be exploited by an adversary, as suggested by masking security proofs. For attacks exploiting a divide-and-conquer strategy, the answer is negative: only the leakages corresponding to the first/last rounds of a block cipher can be exploited. Soft Analytical Side-Channel Attacks (SASCA) have been introduced as a powerful solution to mitigate this limitation. They represent the target implementation and its leakages as a code (similar to a Low Density Parity Check code) that is decoded thanks to belief propagation. Previous works have shown the low data complexities that SASCA can reach in practice. In this paper, we revisit these attacks by modeling them with a variation of the Random Probing Model used in masking security proofs, that we denote as the Local Random Probing Model (LRPM). Our study establishes interesting connections between this model and the erasure channel used in coding theory, leading to the following benefits. First, the LRPM allows bounding the security of concrete implementations against SASCA in a fast and intuitive manner. We use it in order to confirm that the leakage of any operation in a block cipher can be exploited, although the leakages of external operations dominate in known-plaintext/ciphertext attack scenarios. Second, we show that the LRPM is a tool of choice for the (nearly worst-case) analysis of masked implementations in the noisy leakage model, taking advantage of all the operations performed, and leading to new tradeoffs between their amount of randomness and physical noise level. Third, we show that it can considerably speed up the evaluation of other countermeasures such as shuffling.

Available format(s)
Publication info
Published by the IACR in TCHES 2020
Side-channel analysisbelief propagationrandom probing modelworst-case attacks
Contact author(s)
fstandae @ uclouvain be
2020-07-15: revised
2018-05-23: received
See all versions
Short URL
Creative Commons Attribution


      author = {Qian Guo and Vincent Grosso and François-Xavier Standaert and Olivier Bronchain},
      title = {Modeling Soft Analytical Side-Channel Attacks from a Coding Theory Viewpoint},
      howpublished = {Cryptology ePrint Archive, Paper 2018/498},
      year = {2018},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.