A Comparison of Statistical Techniques for Detecting Side-Channel Information Leakage in Cryptographic Devices
University of Bristol, Department of Computer Science, Merchant Venturers Building, Woodland Road, BS8 1UB, Bristol, UK
Cryptology ePrint Archive: Report 2013/298, 2013
@article{mather2013comparison,
title={A Comparison of Statistical Techniques for Detecting Side-Channel Information Leakage in Cryptographic Devices},
author={Mather, Luke and Oswald, Elisabeth and Bandenburg, Joe and W{‘o}jcik, Marcin},
year={2013}
}
The development of a standardised testing methodology for side-channel resistance of cryptographic devices is an issue that has received recent focus from standardisation bodies such as NIST. Statistical techniques such as hypothesis and significance testing appear to be ideally suited for this purpose. In this work we evaluate the candidacy of three such tests: a emph{t}-test proposed by Cryptography Research Inc., and two mutual information-based tests. We compare the detection tests in a theoretical setting by conducting an emph{a priori} statistical power analysis, covering previously unforeseen problems arising from multiple hypothesis testing, and analyse the practical application of the tests through a case study using an implementation of the AES on an ARM7 microcontroller, demonstrating a trade-off between test genericity and data and computational complexity.
May 30, 2013 by hgpu