Supporting Material To "Statistical Fault Attacks On Nonce-Based Authenticated Encryption Schemes"
Christoph Dobraunig, Maria Eichlseder, Thomas Korak, Viktor Lomne, Florian Mendel · Zenodo (CERN European Organization for Nuclear Research) · 2016
supporting_material_code/setX/ct_fault.txt: each line corresponds to one ciphertext received from the device under test while encrypting a plaintext. The bytes are separated by a comma. For every encryption a fault has been injected: set1: Laser fault injections targeting an AES co-processor on a smartcard microcontroller. set2: Clock tampering targeting an AES co-processor implemented on a general-purpose microcontroller. set3 & 4: Clock tampering targeting an AES software implementation (AVR crypto lib ASM) implemented on a general-purpose microcontroller (ATXmega256A3). supporting_material_code/main.cpp: program for key recovery which takes as input the faulty ciphertexts (ct_fault.txt)