Correlation Electromagnetic Analysis for Cryptographic Device

In this paper, an analysis of filtering window impacts on estimation accuracy of electromagnetic (EM) information leakage from exposed areas in power delivery network (PDN) of cryptographic devices is presented. There are exposed areas in the PDN such as decoupling capacitors, through via plating, and small power/ground interconnections where full-byte secret key information can be leaked in the form of EM fields. Various waveforms are measured using EM field probes on the PDN of the target cryptographic device. Correlation electromagnetic analysis (CEMA), field distribution analysis, and secret key extraction are conducted based on the measured waveforms via EM field radiation from the exposed PDN. It is verified that adopting a proper filtering window to remove impacts of noise irrelevant to secret key processing is important for an accurate and efficient estimation of the information leakage from the PDN. Based on the experiment and analysis results, an efficient leakage location detection method using the filtered waveforms is discussed.

Sensitive cryptographic information, e.g. AES secret keys, can be extracted from the electromagnetic (EM) leakages unintentionally emitted by a device using techniques such as Correlation Electromagnetic Analysis (CEMA). In this paper, we introduce Correlation Optimization (CO), a novel approach that improves CEMA attacks by formulating the selection of useful EM leakage samples in a trace as a machine learning optimization problem. To this end, we propose the correlation loss function, which aims to maximize the Pearson correlation between a set of EM traces and the true AES key during training. We show that CO works with high-dimensional and noisy traces, regardless of time-domain trace alignment and without requiring prior knowledge of the power consumption characteristics of the cryptographic hardware. We evaluate our approach using the ASCAD benchmark dataset and a custom dataset of EM leakages from an Arduino Duemilanove, captured with a USRP B200 SDR. Our results indicate that the masked AES implementation used in all three ASCAD datasets can be broken with a shallow Multilayer Perceptron model, whilst requiring only 1,000 test traces on average. A similar methodology was employed to break the unprotected AES implementation from our custom dataset, using 22,000 unaligned and unfiltered test traces.

Correlation electromagnetic analysis (CEMA) is a method prevalent in side-channel analysis of cryptographic devices. Its success mostly depends on the quality of electromagnetic signals acquired from the devices. In the past, only one byte of the key was analyzed and other bytes were regarded as noise. Apparently, other bytes’ useful information was wasted, which may increase the difficulty of recovering the key. Multi-objective optimization is a good way to solve the problem of a single byte of the key. In this work, we applied multi-objective optimization to correlation electromagnetic analysis taking all bytes of the key into consideration. Combining the advantages of multi-objective optimization and genetic algorithm, we put forward a novel multi-objective electromagnetic analysis based on a genetic algorithm to take full advantage of information when recovering the key. Experiments with an Advanced Encryption Standard (AES) cryptographic algorithm on a Sakura-G board demonstrate the efficiency of our method in practice. The experimental results show that our method reduces the number of traces required in correlation electromagnetic analysis. It achieved approximately 42.72% improvement for the corresponding case compared with CEMA.

Data Encryption Standard (DES) is the most widely used symmetric-key algorithm for encryption algorithm. Different attacks like brute force and cryptanalysis attack can be used to break DES due to its small key size and simple and uniform distribution XOR operation. With the issues mentioned above, this paper proposes modification to enhance DES against these various attacks. The proposed enhancement used f-function by incorporating striding techniques instead of just performing the XOR operation between 56- bit sub key and the plaintext. The security against the known exhaustive attack and cryptanalysis attack was enhanced. The enhanced DES have been evaluated and compared against original DES using avalanche effect. Enhanced DES resulted to an average of avalanche effect of 55% due to one-bit vibration in plaintext.

The threat of electromagnetic (EM) information leakage induced by intentional electromagnetic interference (IEMI) for single-ended signals has been reported. The intensity of the leaked EM waves can be controlled by the intensity of the induced disturbance waves. If the EM information leakage method can be applied to other signaling schemes, more devices would be threatened. As a result, countermeasures need to be taken. This study shows that the threat of EM information leakage induced by IEMI exists in other signaling schemes, using universal serial bus (USB) 2.0 devices, one of the differential signaling standards. Specifically, using a USB keyboard as an evaluation target, we demonstrate that the output impedance of the IC changes according to its output states, causing fluctuations in the amplitude of the reflected waves. As a result, we confirm that the differential signal is leaked by demodulating the amplitude of the reflected waves.

Correlation Electromagnetic analysis (CEMA) has been effective in revealing the cryptographic key on cryptosystems. Random delay insertion (RDI) causes misalignments to prevent the action of these attacks in the time domain to avoid information leakage. In this paper, we first use the newly proposed time-frequency transformation Hirschman Optimal Transform (HOT) to transform the signal from the time domain to the frequency domain for analysis. Experimental results show that this method conquers the weakness in the time domain analysis in which the samples have to be aligned accurately. So, our proposed method can be used to break cipher chips with random delay. We find that our method is more efficient than a similar approach based on the DFT.

The unintentional electromagnetic (EM) radiation from electronic information equipment will cause the leakage of information. EM information leakage identification is an important research area of EM information security. Previous studies only focused on a particular type of information leakage, ignoring that there are multiple types of information contained in the leaked EM signal. This paper presents a multi-dimensional information leakage model for the first time, which reveals the multiple information leakage risks in an unintentional EM radiation. The EM information leakage of computer monitors is taken as an example to verify the model. Furthermore, a Convolutional Neural Network (CNN) based multi-dimensional information identification method is proposed. This novel method designed a unified neural network architecture to identify multiple information leaked by the same EM radiation from the monitor. It overcomes the limitation of available identification methods that need to definite leakage characteristics for each type of information leakage. The effectiveness of the method is validated by contrast experiments.

The problem of information security is increasingly prominent with the ongoing development of information technology.Electromagnetic (EM) information leakage is a great hidden danger to information security, and research on the topic has great significance.In this paper, the principle of power line (PL) EM information leakage in computers is studied.PL conduction and radiation leakage models are built.Experimental analysis is implemented to further prove the potential harmfulness to security of EM information leakage from PL.

File-sharing activities become a bridge for communication in the form of data between one party and another party. File sharing allows users to share data with other users, by uploading data to the server computer and other users can download data from the server computer. A document security system is indispensable to keep document data safe until its destination. File Web Sharing will transmit data with cryptographic methodologies. The algorithm used is Advanced Encryption Standard (AES), Data Encryption Standard (DES), and Blowfish. This study aims to compare the performance of AES, DES, and Blowfish algorithms when implemented to secure file sharing. Performance research results show that the DES algorithm is on average 8.35% faster than AES and the Blowfish algorithm is 7.11% faster than AES. Memory usage capacity testing shows that the AES algorithm requires 4.82% greater memory capacity than Blowfish, and the DES requires 2.41% greater memory capacity than the Blowfish algorithm. Kegiatan file sharing menjadi jembatan komunikasi data antara satu pihak dengan pihak lainnya. File sharing memberikan pengguna kemampuan untuk berbagi data dengan pengguna lain, dengan cara mengunggah data ke komputer server dan pengguna lain dapat mengunduh data dari komputer server. Sistem keamanan terhadap dokumen sangat diperlukan untuk menjaga data dokumen tetap aman sampai tujuannya. Web File Sharing akan mengirimkan data dengan metodologi kriptografi. Algoritma yang digunakan adalah Advanced Encryption Standard (AES), Data Encryption Standard (DES), dan Blowfish. Penelitian ini bertujuan untuk membandingkan kinerja algoritma AES, DES dan Blowfish saat diimplementasikan untuk mengamankan file sharing. Hasil pengujian kinerja menunjukkan bahwa algoritma DES rata-rata 8,35% lebih cepat dibandingkan AES sedangkan Blowfish 7,11% lebih cepat dibandingkan AES. Berdasarkan pengujian kapasitas penggunaan memori terlihat bahwa AES membutuhkan kapasitas memori 4,82% lebih besar dibandingkan Blowfish dan DES membutuhkan kapasitas memori 2,41% lebih besar dari Blowfish.

The Data Encryption Standard (DES) was a prevalent symmetric key block cipher scheme. It was the most popular used cryptographic algorithm. DES's security was a highly debatable aspect until it became an insecure algorithm in 1999. In this paper, an enhancement that overcomes the security weakness of DES is introduced. The modification employs the chaotic logistic map and the art of the Elliptic Curve Cryptography. The required key generation and distribution are achieved by the enhancement to establish a communication session. Our new DES is applied on image encryption and decryption processes. Experimental results are carried out with detailed analyses, the results demonstrate that the proposed scheme has an absolutely large key space to encounter the brute-force attack and it has a good immunity to the statistical attacks. Accordingly the introduced new DES algorithm could be used as a remarkably secure algorithm.

High-capability electronics systems for a compact, battery-operated computer: Brooke, E, Livengood, R J, Smith, R C and Myers, T FHewlett-Packard J. Vol 34 No 6 (June 1983) p 10

This article demonstrates enhanced power (P) and electromagnetic (EM) side-channel analysis (SCA) attack resistance of standard (unprotected) 128-bit advanced encryption standard (AES) engines with parallel (P-AES, 128-bit) and serial (S-AES, 8-bit) datapaths and a 128-bit SIMON engine with the bit-serial (1-bit) datapath by an on-die security-aware all-digital low-dropout (DLDO) regulator. The proposed DLDO improves SCA resistance using control-loop-induced perturbations in a nominal DLDO, enhanced by a random switching noise injector (SNI) by power-stage control and a randomized reference voltage (R-VREF) generator coupled with all-digital clock modulation (ADCM). SCA performed on the measured power/EM signatures acquired from a 130-nm CMOS testchip demonstrates up to 25 $\times $ reduction in test vector leakage assessment (TVLA) leakage for P-AES and 3579 $\times $ , 2182 $\times $ , and 500 $\times $ increase in minimum-traces-to-disclose (MTD) 80% of the subkeys for P-AES, S-AES, and SIMON cores, respectively, with respect to correlation power analysis (CPA) and correlation EM analysis (CEMA).

This paper shows that electromagnetic (EM) information leakage from modern laptops and desktops (with no peripherals attached) is indeed possible and is relatively easy to achieve. The experiments are performed on three laptop systems and one desktop system with different processors (Intel Centrino, Core 2, Core i7, and AMD Turion), and show that both active (program deliberately tries to cause emanations at a particular frequency) and passive (emanations at different frequencies happen as a result of system activity) EM side-channel attacks are possible on all the systems we tested. Furthermore, this paper shows that EM information leakage can reliably be received at distances that vary from tens of centimeters to several meters including the signals that have propagated through cubicle or structural walls. Finally, this paper shows how activity levels and data values used in accessing different parts of the memory subsystem (off-chip memory and each level of on-chip caches) affect the transmission distance.

Data security is the focus of information security. As a primary method, file encryption is adopted for ensuring data security. Encryption algorithms created to meet the Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are widely used in a variety of systems. These algorithms are computationally highly complex, thus, the efficiency of encrypting or decrypting large files can be drastically reduced. To this end, we propose an optimized algorithm that efficiently encrypts and decrypts large files by parallelizing processing tasks on a single heterogeneous many-core processor in the Sunway TaihuLight computer system. Firstly, we convert the serial DES and AES programs to our experimental platform. Then we implement a task assignment strategy to test the converted algorithms. Finally, in order to optimize parallelized algorithms and improve data transmission performance, we apply the master-slave communication optimization, the three-stage parallel pipeline, and vectorization. Extensive experiments demonstrate that our optimized algorithm is faster than the state-of-the-art open-source implementations of DES and AES. Compared with the serial processing algorithms, our parallelized DES and AES perform nearly 40 times and 72 times faster, respectively. The work described in this paper leverages existing methods and provides a sound basis for the direction of future research in data encryption.

The data encryption standard (DES) is an algorithm with approximate 72 quadrillion possible keys. The security of the DES is based on the difficulty of picking out the right key after the 16-round nonlinear function operations. In this paper, we propose a concrete recursive sticker molecular algorithm to the DES. The molecular sticker algorithm includes three parts: initializing the key space with all possible keys, encryption and detecting the corresponding key. The essential operations required in DES are implemented by the molecular sticker functions. The short memory strands, tubes, enzymes needed by the molecular sticker algorithm are calculated and analyzed. Furthermore, this work indicates that the DES are perhaps insecure and also presents clear evidence of the ability of molecular computing to perform complicated operations.