Stochastic Collision Attack

• Published in: IEEE transactions on information forensics and security Vol. 12; no. 9; pp. 2090 - 2104
• Main Authors: Bruneau, Nicolas, Carlet, Claude, Guilley, Sylvain, Heuser, Annelie, Prouff, Emmanuel, Rioul, Olivier
• Format: Journal Article
• Language: English
• Published: IEEE 01.09.2017; Institute of Electrical and Electronics Engineers
• Subjects: Analytical models; collision attacks; Computer Science; Context; Cryptography and Security; Hardware; masking; optimal distinguisher; Semiconductor device modeling; Side-channel analysis; Side-channel attacks; Signal to noise ratio; Stochastic processes
• ISSN: 1556-6013; 1556-6021
• DOI: 10.1109/TIFS.2017.2697401

On the one hand, collision attacks have been introduced in the context of side-channel analysis for attackers who exploit repeated code with the same data without having any knowledge of the leakage model. On the other hand, stochastic attacks have been introduced to recover leakage models of internally processed intermediate secret variables. Both techniques have shown advantages and intrinsic limitations. Most collision attacks, for instance, fail in exploiting all the leakages (e.g., only a subset of matching samples are analyzed), whereas stochastic attacks cannot involve linear regression with the full basis (while the latter basis is the most informative one). In this paper, we present an innovative attacking approach, which combines the flavors of stochastic and collision attacks. Importantly, our attack is derived from the optimal distinguisher, which maximizes the success rate when the model is known. Notably, we develop an original closed-form expression, which shows many benefits by using the full algebraic description of the leakage model. Using simulated data, we show in the unprotected case that, for low noise, the stochastic collision attack is superior to the state of the art, whereas asymptotically and thus, for higher noise, it becomes equivalent to the correlation-enhanced collision attack. Our so-called stochastic collision attack is extended to the scenario where the implementation is protected by masking. In this case, our new stochastic collision attack is more efficient in all scenarios and, remarkably, tends to the optimal distinguisher. We confirm the practicability of the stochastic collision attack thanks to experiments against a public data set (DPA contest v4). Furthermore, we derive the stochastic collision attack in case of zero-offset leakage that occurs in protected hardware implementations and use simulated data for comparison. Eventually, we underline the capability of the new distinguisher to improve its efficiency when the attack multiplicity increases.