Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: Differential power analysis


Related Topics

  
  Power analysis - Wikipedia, the free encyclopedia
In cryptography, power analysis is a form of side channel attack in which the attacker studies the power consumption of a cryptographic hardware device (such as a smart card, tamperproof "fl box", microchip, etc).
Differential power analysis is an extension of power analysis that can allow an attacker to compute the intermediate values of data blocks and key blocks.
Power analysis can most easily distinguish conditional branches in the execution of the cryptographic program since a device does different things (requiring different power) depending on which conditional branch is executed.
en.wikipedia.org /wiki/Power_analysis   (560 words)

  
 Power analysis   (Site not responding. Last check: 2007-10-26)
In cryptography, power analysis is a form of side channel attack in which the attacker studies the powerconsumption of a cryptographic hardware device (such as a smart card,tamperproof "fl box", microchip, etc).
Power analysis canshow the difference between a register with a 1 and a register with a 0 at the end when this happens.
Power analysis can most easily distinguish conditional branches in the execution of the cryptographic program since a devicedoes different things (requiring different power) depending on which conditional branch is executed.
www.therfcc.org /power-analysis-275062.html   (479 words)

  
 Integrated circuit device with power analysis protection circuitry - US Patent 6419159   (Site not responding. Last check: 2007-10-26)
A device as recited in claim 1, wherein execution of the processor results in power fluctuations on the power lines that have a first period and the power analysis protection circuitry causes additional power fluctuations on the power lines of a second period that is less than or equal to the first period.
To thwart differential power analysis attacks, the IC device 10 is equipped with power analysis protection circuitry 40 coupled to the power lines Vcc and Gnd to mask power consumption differences measurable on these power lines as a result of processor execution.
According to one implementation, the power analysis protection circuitry 40 varies its power consumption at a period that is less than or equal to the period of power fluctuations resulting from normal processor execution of the instructions.
www.patentstorm.us /patents/6419159.html   (3649 words)

  
 System and method for preventing differential power analysis attacks (DPA) on a cryptographic device - US Patent 6766455   (Site not responding. Last check: 2007-10-26)
A power source, which is external to the secure enclosure, is coupled to and supplies power to the processor, the memory and the storage component.
A method of protecting a cryptographic device performing cryptographic operations from DPA attack, the method comprising the step of regulating the voltage at the power input of the cryptographic device to maintain a constant value, whereby the power drawn from a power supply for the cryptographic device is held constant.
Power is provided to the cryptographic device from a power source external to the physically secure environment and additional circuitry connected to the power source and the cryptographic device maintains a constant power drain on the power source as the cryptographic device performs various operations.
www.patentstorm.us /patents/6766455.html   (3657 words)

  
 IP: Differential Power Analysis from RISKS   (Site not responding. Last check: 2007-10-26)
The basic idea of the attacks is that the power consumption of a device (such as a smartcard) is statistically correlated to the operations it performs.
Differential Power Analysis (DPA) DPA is a much more powerful attack than SPA, and is much more difficult to prevent.
Data collection for DPA may be performed as described previously by sampling a device's power consumption during cryptographic operations as a function of time.
www.interesting-people.org /archives/interesting-people/199806/msg00001.html   (1741 words)

  
 CSE 127: Extra Credit
Simple power analysis might be done this way, though it's not necessarily easy either -- since the power ``spikes'' will probably be rather regularly spaced together, esp if the number of intervening (low power) instruction are approximately the same.
Often the power signal is so full of noise -- or there is enough of on-card capacitance -- that all you can measure is the total power consumed over a long(ish) period of time -- e.g., the duration of the entire modexp function.
The power (timing) requirements for doing the squarings of z can be estimated with a good power (timing) model, and eliminated from any direct measurements of total power (time) required to compute any input x.
www.bennetyee.org /ucsd-pages/Courses/cse127.w02/extra_cred   (718 words)

  
 iApplianceWeb-iApplianceReview   (Site not responding. Last check: 2007-10-26)
The aim of the company's DPA Workstation is to make it easier and less costly for smart card manufacturers, testing labs and academic researchers to evaluate implementations and improve resistance to differential power analysis (DPA) attacks in smart cards and other tamper-resistant devices.
Differential Power Analysis enables an intruder to extract secret keys and information from smart cards and secure cryptographic tokens, which can be used to create fraudulent transactions, generate counterfeit digital cash or perform content piracy.
DPA eavesdrops on the fluctuating electrical power consumption of the microprocessors at the heart of these devices, and uses advanced statistical methods to extract cryptographic keys and other secrets.
www.iapplianceweb.com /story/OEG20021206S0048.htm   (518 words)

  
 [No title]   (Site not responding. Last check: 2007-10-26)
Differential Power Analysis Paul Kocker, Joshua Jaffe, Benjamin Jun Crypto '99 Moderator - Joel Hegg Summary: Smartcards are becoming increasingly popular as security tools.
discovered that mathematical analysis of the power consumption of a smartcard sampled at a very high frequency can reveal information about the operations the smartcard is performing.
For example, the power trace depends ont only on data set and instruction sequence, but also on signal-to-noise ration present in the device and physical aspects of circuits used in the device.
ciae.cs.uiuc.edu /SRG/summaries/summary3-4-02.txt   (677 words)

  
 Encyclopedia: Power analysis
A cryptosystem (or cryptographic system) is the package of all procedures, protocols, cryptographic algorithms and instructions used for encoding and decoding messages using cryptography.
The key-schedule of DES In cryptography, the algorithm for computing the subkeys for each round in a product cipher from the encryption (or decryption) key is called the key schedule.
Exclusive disjunction (usual symbol xor) is a logical operator that results in true if one of the operands (not both) is true.
www.nationmaster.com /encyclopedia/Power-analysis   (910 words)

  
 Review of CHES 2000, August 17-18, 2000, by Joe Marconis
These two capacitors along with four power transistors and a switch control circuit are used in a circuit which is configured such that the smart card chip is always powered by at least one capacitor, but the external power supply is never connected directly to the chip.
Experiments performed by directly monitoring power dissipation of a PIC16C84 chip while executing a set of test routines demonstrated that it was possible to extract Hamming weights of data and transition counts between data items being written to registers or memory even with simple instructions such as register moves.
"Differential power analysis in the presence of hardware countermeasures" was a discussion of methods for overcoming hardware based DPA countermeasures, focusing on random process interrupts and noisy power consumption.
www.ieee-security.org /Cipher/ConfReports/2000/CR2000-CHES2000.html   (2605 words)

  
 Tamper Resistance - Differential Power Analysis   (Site not responding. Last check: 2007-10-26)
Differential Power Analysis (DPA) is a class of attacks discovered by researchers at Cryptography Research.
DPA is a powerful tool that allows cryptanalysts to extract secret keys and compromise the security of smart cards and other cryptographic devices by analyzing their power consumption.
Simple Power Analysis (SPA) is a simpler form of the attack that does not require statistical analysis.
www.cryptography.com /dpa/index.html   (260 words)

  
 Differential Power Analysis in the Presence of Hardware Countermeasures - Clavier, Coron, Dabbous (ResearchIndex)   (Site not responding. Last check: 2007-10-26)
Differential Power Analysis in the Presence of Hardware Countermeasures - Clavier, Coron, Dabbous (ResearchIndex)
Differential Power Analysis in the Presence of Hardware Countermeasures (2000)
Clavier, J.-S. Coron and N. Dabbous, "Differential Power Analysis in the Presence of Hardware Countermeasures," in Proc.
citeseer.ist.psu.edu /631723.html   (428 words)

  
 TNO   (Site not responding. Last check: 2007-10-26)
DPA is a technique that may allow an attacker to retrieve keys and completely reverse engineer the code that is running on the smart card.
DPA is used to retrieve information from known cryptographic algorithms (DES, RSA, GSM COMP128, AES) and proprietary algorithms executed by software or dedicated co-processors on the smart card.
The Evaluation Centre is the most suitable partner for assessing the DPA susceptibility of a smart card and evaluating the effectiveness of proposed or implemented countermeasures against DPA.
www.itsef.tno.nl /level3/poweranalysis.htm   (465 words)

  
 COmputer Security and Industrial Cryptography
Several tools, like the differential cryptanalysis or the boomerang and amplified boomerang attack as an extension of the differential analysis, are used to analyse this cipher.
Differential Power Analysis (DPA) implies measuring the supply current of a cipher-circuit in an attempt to uncover part of a cipher-key.
Power and timing analysis attacks are typical examples of side-channel attacks, that have been demonstrated to be effective against implementations without special countermeasures.
www.esat.kuleuven.ac.be /sista-cosic-docarch/index.php?page=activities&view=2&id1=&id2=&id3=   (15886 words)

  
 Method of preventing power analysis attacks on microelectronic assemblies - Patent 6298135
However, power consumption information of a smartcard can be monitored by a malicious attacker to learn the bits of this private-key, thus breaching the security of the smartcard.
A solution is therefore desired for mitigating or altogether eliminating the vulnerability of cryptographic elements that may possibly result by analysis of power variations, such as a cryptographic element revealing power consumption information that is correlated to the secret exponent.
Another solution to prevent a DPA attack on the exponentiation function is to use a random combination of the method of the preferred embodiment and the second embodiment of the present invention.
www.freepatentsonline.com /6298135.html   (4776 words)

  
 Title page for ETD etd-06062003-163826
Power analysis attacks involve cryptographic hardware leaking information during encryption because power consumption is correlated to the key used for encryption.
Power analysis attacks have proven successful against public and private key cryptosystems in a variety of form factors.
The tool developed here counted the transitions of CLB output signals to estimate power and was used to explore the impact of possible gate-level countermeasures to differential power analysis.
scholar.lib.vt.edu /theses/available/etd-06062003-163826   (314 words)

  
 Differential power analysis - Wikipedia, the free encyclopedia
Differential power analysis (DPA) is a method of attacking a cryptosystem which exploits the varying power consumption of microprocessors while executing cryptographic program code.
Using statistical analysis of the power consumption measurements of many runs of a given crypto graphic algorithm, it may be possible to infer information on a secret key stored on a smart card, if the implementation of the algorithm is not DPA tamper proof.
This page was last modified 16:15, 17 March 2005.
en.wikipedia.org /wiki/Differential_power_analysis   (102 words)

  
 Smart Card Alliance - Industry News: Alliance News   (Site not responding. Last check: 2007-10-26)
The company also provides the DPA Workstation™ to help companies improve resistance to DPA attacks, and to help unlicensed vendors recognize the need to obtain licenses and protect their products.
Differential power analysis and related attacks were first discovered at Cryptography Research by Paul Kocher, Joshua Jaffe and Benjamin Jun. DPA involves monitoring the fluctuating electrical power consumption of smart cards and other devices then applying advanced statistical methods to infer secret keys and other information.
Effective resistance to DPA is required to prevent counterfeiting of digital cash, impersonation, piracy of digital content, election fraud and other attacks.
smartcardalliance.org /industry_news/industry_news_item.cfm?itemID=1324   (505 words)

  
 DPA workstation quizzes smart card safety | InfoWorld | | 2002-11-27 | By Brian Fonseca   (Site not responding. Last check: 2007-10-26)
Differential Power Analysis attacks can enable a perpetrator to extract secret keys and measure protected data from smart cards and secure cryptographic tokens by "eavesdropping" on microprocessor fluctuations in the amount of power a smart card is consuming.
During testing of a smart card commands, DPA workstation's cryptographic software will turn raw information into power consumption data to discover if correlated key information is detectable and where computation knowledge may be leaked out.
DPA Workstation's technology is compliant with ISO7816 family of smart card standards and can be adapted for other cryptographic-ready items such as a USB token.
www.infoworld.com /article/02/11/27/021127hndpawkstation_1.html   (1097 words)

  
 [No title]   (Site not responding. Last check: 2007-10-26)
Differential power cryptanalysis has been invented in 1998 by a group of researchers from Cryptography Research, Inc., As of today, these attacks are successful against majority of cryptographic tokens available on the market, including all types of smart cards, PCMCIA cards and cryptographic buttons, and no effective countermeasure has been developed, yet.
The only effective defense is the physical protection, as the attack requires an access to a cryptographic token with secret parameters, such as a cryptographic key, stored on.
The attack is based on sampling the power consumption of the device for a series of cryptographic transformations involving hundreds to thousands of random ciphertexts, and then performing a statistical analysis, leading to a full recovery of the key.
www.bennetyee.org /ucsd-pages/Courses/cse127.w02/lec24   (367 words)

  
 CACR: 1998 Conferences   (Site not responding. Last check: 2007-10-26)
Recent work at Cryptography Research has found that the amount of power used by many cryptographic devices is correlated to the operations they perform, and that these correlations can be analyzed to recover secret keys.
Simple Power Analysis (SPA) and Differential Power Analysis (DPA) are methods for determining secret keys using power consumption measurements.
More recently he has led research to develop Differential Power Analysis and designs for securing smart cards and other devices against these attacks, as well as to design a record-breaking DES Key Search machine.
www.cacr.math.uwaterloo.ca /conferences/1998/isw/kocher.html   (204 words)

  
 Company to license device-security tools | CNET News.com
With differential power analysis, or DPA, a hacker monitors variations in the electrical consumption of a card that performs encryption functions--then performs reverse analyses to determine passwords.
To execute a DPA attack, the device must be in the hands of the attacker.
So, while a thief could use this approach to determine the password of a bank card, a more common scenario would be for a hacker to use it to unblock pay TV signals on his or her home cable box.
news.com.com /2100-7355-5193696.html   (790 words)

  
 Differential Power Analysis
DPA is a much more powerful attack than SPA, and is much more difficult to prevent.
While the effects of a single transistor switching would be normally be impossible to identify from direct observations of a device's power consumption, the statistical operations used in DPA are able to reliably identify extraordinarily small differences in power
While the DPA techniques described above analyze information across a single event between samples, high-order DPA may be used to correlate information between multiple cryptographic suboperations.
cryptome.sabotage.org /dpa.htm   (1680 words)

  
 The Risks Digest Volume 19: Issue 80
The three attacks use increasingly sophisticated analysis methods.
Current flows across the transistor substrate when charge is applied to (or removed from) the gate.
However, DPA countermeasures must also address HO-DPA attacks to be effective.
catless.ncl.ac.uk /Risks/19.80.html   (3648 words)

  
 FilmTek™ 4000 - High Precision Measurement of Index
It incorporates multiple detectors positioned at different angles of incidence — plus our patented multi-angle Differential Power Spectral Density analysis capability — to accurately measure the index of refraction with a resolution of 0.00002.
The ratio of their positions is a function of the index of refraction of the film, and the angle of incidence of the oblique measurement.
Differential Power Spectral Density analysis of an oxide film.
www.sci-soft.com /FilmTek%204000.htm   (472 words)

  
 Cryptographers Discuss Finding of Security Flaw in 'Smart Cards'
The technique, which monitors the cards' power consumption to break the codes, is a possible threat for some of the new digital transaction systems being tested in Europe and New York and makes life more complicated for computer security experts who often rely on these tamper-resistant cards to keep out intruders.
The chip consumes slightly more power to process a one than a zero and the key can be extracted, in these simple cases, by simply reading the peaks and valleys in the graph of power consumption.
This technique, which the company describes with a trademarked phrase "differential power analysis", allows an attacker to extract each bit of the key by making guesses and testing them several times.
www.efc.ca /pages/media/nytimes.10jun98.html   (1971 words)

  
 Cryptology ePrint Archive   (Site not responding. Last check: 2007-10-26)
This paper describes the synthesis of Dynamic Differential Logic to increase the resistance of FPGA implementations against Differential Power Analysis.
The synthesis procedure is developed and a detailed description is given of how EDA tools should be used appropriately to implement a secure digital design flow.
Experimental results also indicate that a secure version of the AES encryption algorithm can now be implemented with a mere 50% increase in time delay and 90% increase in slice utilization when compared with a normal non-secure single ended implementation.
eprint.iacr.org /2004/068   (107 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.