Temperature-Triggered Hardware Trojan Based Algebraic Fault Analysis of SKINNY-64-64 Lightweight Block Cipher
Source abstract
Abstract
SKINNY-64-64 is a lightweight block cipher with a 64-bit block length and key length, and it is mainly used on the Internet of Things (IoT). Currently, faults can be injected into cryptographic devices by attackers in a variety of ways, but it is still difficult to achieve a precisely located fault attacks at a low cost, whereas a Hardware Trojan (HT) can realize this. Temperature, as a physical quantity incidental to the operation of a cryptographic device, is easily overlooked. In this paper, a temperature-triggered HT (THT) is designed, which, when activated, causes a specific bit of the intermediate state of the SKINNY-64-64 to be flipped. Further, in this paper, a THT-based algebraic fault analysis (THT-AFA) method is proposed. To demonstrate the effectiveness of the method, experiments on algebraic fault analysis (AFA) and THT-AFA have been carried out on SKINNY-64-64. In the THT-AFA for SKINNY-64-64, it is only required to activate the THT 3 times to obtain the master key with a 100% success rate, and the average time for the attack is 64.57 s. However, when performing AFA on this cipher, we provide a relationship between the number of different faults and the residual entropy of the key. In comparison, our proposed THT-AFA method has better performance in terms of attack efficiency. To the best of our knowledge, this is the first HT attack on SKINNY-64-64.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Physical Unclonable Functions (PUFs) and Hardware Security · Cryptographic Implementations and Security · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (31)
Show source-provided references
1. The skinny family of block ciphers and its low-latency variant mantis
2. Low voltage fault attacks on the RSA cryptosystem
3. Low voltage fault attacks to AES
4. Fault attacks for CRT based RSA: New attacks, new results, and new countermeasures
5. LLFI: Lateral laser fault injection attack
6. Investigation of parameters influencing the success of optical fault attacks
7. Comprehensive analysis of software countermeasures against fault attacks
8. SNIFF: Reverse engineering of neural networks with fault attacks10.1109/TR.2021.3105697 ↗
9. Fault injection attacks on cryptographic devices: Theory, practice, and countermeasures10.1109/JPROC.2012.2188769 ↗
10. Hardware trojan insertion by direct modification of FPGA configuration bitstream10.1109/MDT.2013.2247460 ↗
11. On hardware trojan design and implementation at register-transfer level
12. Hardware trojan attacks in fpga devices: Threat analysis and effective counter measures
13. Hardware trojan attacks in embedded memory
14. Hardware trojan design on neural networks
15. Hardware trojan in FPGA CNN accelerator
16. Dead flit attack on NoC by hardware trojan and its impact analysis
17. Hardware trojan horses in cryptographic IP cores
18. The risk of outsourcing: Hidden SCA trojans in third-party IP-cores threaten cryptographic ICs
19. The temperature side channel and heating fault attacks
20. Precise fault-injections using voltage and temperature manipulation for differential cryptanalysis
21. Remote activation of hardware trojans via a covert temperature channel
22. S. Ghandali, D. Holcomb and C. Paar, “Temperature-based hardware trojan for ring-oscillator-based TRNGs,” arXiv preprint arXiv:1910.00735, 2019.
23. Fault-algebraic attacks on inner rounds of DES
24. Internet, “7 Series FPGAs and Zynq-7000 SoC XADC Dual 12-Bit 1 MSPS Analog-to-Digital Converter User Guide (UG480),” [Online]. Available: https://docs.xilinx.com/r/en-US/ug480_7Series_XADC/7-Series-FPGAs-and-Zynq-7000-SoC-XADC-Dual-12-Bit-1-MSPS-Analog-to-Digital-Converter-User-Guide-UG480. (accessed on 28 September 2022).
25. Internet, “LKT4202U,” [Online]. Available: http://www.bjlcs-tech.com/article/226.html. (accessed on 30 December 2022).
26. The Xilinx Design Language (XDL): Tutorial and use cases
27. Bosphorus: Bridging ANF and CNF solvers
28. Internet, “Cryptominisat 5.8.0,” [Online]. Available: https://github.com/msoos/cryptominisat/releases. (accessed on 31 December 2022).
29. Fault attack on SKINNY cipher10.1007/s41635-020-00103-z ↗
30. Pushing the limit of PFA: Enhanced persistent fault analysis on block ciphers10.1109/TCAD.2020.3048280 ↗
31. Algebraic persistent fault analysis of SKINNY_64 based on S_Box decomposition10.3390/e24111508 ↗