A Comprehensive Side-Channel Information Leakage Analysis of an In-Order RISC CPU Microarchitecture
Open Access
- 20 August 2018
- journal article
- research article
- Published by Association for Computing Machinery (ACM) in ACM Transactions on Design Automation of Electronic Systems
- Vol. 23 (5) , 1-30
Abstract
Side-channel attacks are a prominent threat to the security of embedded systems. To perform them, an adversary evaluates the goodness of fit of a set of key-dependent power consumption models to a collection of side-channel measurements taken from an actual device, identifying the secret key value as the one yielding the best-fitting model. In this work, we analyze for the first time the microarchitectural components of a 32-bit in-order RISC CPU, showing which one of them is accountable for unexpected side-channel information leakage. We classify the leakage sources, identifying the data serialization points in the microarchitecture and providing a set of hints that can be fruitfully exploited to generate implementations resistant against side-channel attacks, either writing or generating proper assembly code.Keywords
Funding Information
- Horizon 2020 Framework Programme (671668 and 688201)
This publication has 30 references indexed in Scilit:
- The MEET Approach: Securing Cryptographic Embedded Software Against Side Channel AttacksIEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 2015
- Trace-based schedulability analysis to enhance passive side-channel attack resilience of embedded softwareInformation Processing Letters, 2015
- Good Is Not Good Enough2014
- Power Analysis of Atmel CryptoMemory – Recovering Keys from Secure EEPROMs2012
- Univariate side channel attacks and leakage modelingJournal of Cryptographic Engineering, 2011
- Introduction to differential power analysisJournal of Cryptographic Engineering, 2011
- A Design Flow and Evaluation Framework for DPA-Resistant Instruction Set Extensions2009
- Testing power-analysis attack susceptibility in register-transfer level designsIET Information Security, 2007
- Statistics and secret leakageACM Transactions on Embedded Computing Systems, 2004
- Unbiased Estimation of Certain Correlation CoefficientsThe Annals of Mathematical Statistics, 1958