An In-Depth Evaluation of Externally Amplified Coupling (EAC) Attacks—A Concrete Threat for Masked Cryptographic Implementations
Ofek Gur, Tomer Gross, Davide Bellizia, François‐Xavier Standaert, Itamar Levi · IEEE Transactions on Circuits and Systems I Regular Papers · 2022
Masking is a systematic countermeasure to achieve side-channel security for cryptographic algorithms. However, its secure implementation relies on an independence assumption that can be violated by signal coupling. It has been established that coupling induced within a device can be detrimental. It was demonstrated on a$1^{st}$-order secure design (i.e., with two shares) that an adversary who can manipulate the design’s power-measurement setup can externally induce significant coupling. It can thus concretely reduce the “effective-security-order”, i.e., make$1^{st}$-order leakages as significant as$2^{nd}$-order ones with fewer measurements. This paper explores the impact of such external amplification phenomena on fabricated hardware test cases for the first time. We designed a dedicated ASIC to extend the empirical results for demonstrating impact up to the$4^{th}$order. We have systematically evaluate d factors related to adversarial control, e.g., the external measurement resistance. We also investigate d their relative influence compared to intra-design ones, i.e., internal power-grid resistance and transistors’ inherent resistance. Our study demonstrates that externally amplified coupling scale s up to concrete masked hardware designs with various amounts of shares and is not very sensitive to intra-design parameters. Therefore, providing experimental evidence that such coupling should be considered during masking validation.