A cryptography core tolerant to DFA fault attacks

ABSTRACT

This work describes a hardware approach for the concurrent fault detection and error correction in a cryptography core. It has been shown in the literature that transient faults injected in a cryptography core can lead to reveal the encryption code using quite inexpensive equipments. This kind of attack is a real threat to tamper resistant devices such as Smart Cards. To tackle such attacks, the cryptography core must be immune to transient faults. In this work the DES algorithm is taken as a vulnerable cryptosystem case study. We show how an attack against DES is performed through a fault injection campaign. Then, a countermeasure based on partial hardware replication is proposed and applied to DES. Experimental results show the efficiency of the proposed scheme to protect DES against DFA fault attacks. Furthermore, the proposed solution is independent of implementation and can be applied to other cryptography algorithms, such as AES.

REFERENCES

• 1: Guido Bertoni , Luca Breveglieri , Israel Koren , Paolo Maistri , Vincenzo Piuri, A Parity Code Based Fault Detection for an Implementation of the Advanced Encryption Standard, Proceedings of the 17th IEEE International Symposium on Defect and Fault-Tolerance in VLSI Systems, p.51-59, November 06-08, 2002
• 2: Eli Biham , Adi Shamir, Differential Fault Analysis of Secret Key Cryptosystems, Proceedings of the 17th Annual International Cryptology Conference on Advances in Cryptology, p.513-525, August 17-21, 1997
• 3: D. Boneh, R. A. DeMillo, and R. J. Lipton.On the importance of checking cryptographic protocols for faults. Lecture Notes in Computer Science, 1233:37--51, 1997.
• 4: L. Breveglieri , I. Koren , P. Maistri, Incorporating Error Detection and Online Reconfiguration into a Regular Architecture for the Advanced Encryption Standard, Proceedings of the 20th IEEE International Symposium on Defect and Fault Tolerance in VLSI Systems, p.72-80, October 03-05, 2005 [doi>10.1109/DFTVS.2005.41]
• 5: T. A. Chris Weaver, Fadi Gebara and R. Brown. Remora: A dynamic self-tuning processor. University of Michigan CSE Technical Report CSE-TR-460-02, July 2002.
• 6: J.-C. Laprie. Dependability of computer systems: concepts, limits, improvements. Software Reliability Engineering,1995, pages 2--11,October 1995.
• 7: Alfred J. Menezes , Scott A. Vanstone , Paul C. Van Oorschot, Handbook of Applied Cryptography, CRC Press, Inc., Boca Raton, FL, 1996
• 8: Daniel Mesquita , Jean-Denis Techer , Lionel Torres , Gilles Sassatelli , Gaston Cambon , Michel Robert , Fernando Moraes, Current mask generation: a transistor level security against DPA attacks, Proceedings of the 18th annual symposium on Integrated circuits and system design, September 04-07, 2005, Florianolpolis, Brazil [doi>10.1145/1081081.1081114]
• 9: M. Nicolaidis. Design for soft-error mitigation. IEEE Transactions on Device and Materials Reliability, Sept 2002.
• 10: Opencores.Opencores.org, 2005. Disponel em: http://www.opencores.org. Acessado em Setembro de 2005.
• 11: G. Piret and J.-J. Quisquater. A di .erential fault attack technique against SPN structures,with application to the AES and Khazad. Cryptographic Hardware and Embedded Systems -CHES 2003, 2003.
• 12: M. Renaudin , F. Bouesse , Ph. Proust , J. P. Tual , L. Sourgen , F. Germain, High Security Smartcards, Proceedings of the conference on Design, automation and test in Europe, p.10228, February 16-20, 2004
• 13: B. Scheier. Applied Cryptography. John Wiley, 2rd edition, 1996.
• 14: Sergei P. Skorobogatov , Ross J. Anderson, Optical Fault Induction Attacks, Revised Papers from the 4th International Workshop on Cryptographic Hardware and Embedded Systems, p.2-12, August 13-15, 2002
• 15: William Stallings, Cryptography and network security (2nd ed.): principles and practice, Prentice-Hall, Inc., Upper Saddle River, NJ, 1998

INDEX TERMS

Primary Classification:
  B. Hardware
  B.8 Performance and Reliability
      B.8.0 General

General Terms:
Reliability, Security

Keywords:
cryptography, fault attacks, smart cards