SNOW-SCA: ML-assisted Side-Channel Attack on SNOW-V
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2024
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866913263935029248 |
|---|---|
| author | Saurabh, Harshit Golder, Anupam Titti, Samarth Shivakumar Kundu, Suparna Li, Chaoyun Karmakar, Angshuman Das, Debayan |
| author_facet | Saurabh, Harshit Golder, Anupam Titti, Samarth Shivakumar Kundu, Suparna Li, Chaoyun Karmakar, Angshuman Das, Debayan |
| contents | This paper presents SNOW-SCA, the first power side-channel analysis (SCA) attack of a 5G mobile communication security standard candidate, SNOW-V, running on a 32-bit ARM Cortex-M4 microcontroller. First, we perform a generic known-key correlation (KKC) analysis to identify the leakage points. Next, a correlation power analysis (CPA) attack is performed, which reduces the attack complexity to two key guesses for each key byte. The correct secret key is then uniquely identified utilizing linear discriminant analysis (LDA). The profiled SCA attack with LDA achieves 100% accuracy after training with $<200$ traces, which means the attack succeeds with just a single trace. Overall, using the \textit{combined CPA and LDA attack} model, the correct secret key byte is recovered with <50 traces collected using the ChipWhisperer platform. The entire 256-bit secret key of SNOW-V can be recovered incrementally using the proposed SCA attack. Finally, we suggest low-overhead countermeasures that can be used to prevent these SCA attacks. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2403_08267 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | SNOW-SCA: ML-assisted Side-Channel Attack on SNOW-V Saurabh, Harshit Golder, Anupam Titti, Samarth Shivakumar Kundu, Suparna Li, Chaoyun Karmakar, Angshuman Das, Debayan Cryptography and Security Machine Learning Networking and Internet Architecture E.3 This paper presents SNOW-SCA, the first power side-channel analysis (SCA) attack of a 5G mobile communication security standard candidate, SNOW-V, running on a 32-bit ARM Cortex-M4 microcontroller. First, we perform a generic known-key correlation (KKC) analysis to identify the leakage points. Next, a correlation power analysis (CPA) attack is performed, which reduces the attack complexity to two key guesses for each key byte. The correct secret key is then uniquely identified utilizing linear discriminant analysis (LDA). The profiled SCA attack with LDA achieves 100% accuracy after training with $<200$ traces, which means the attack succeeds with just a single trace. Overall, using the \textit{combined CPA and LDA attack} model, the correct secret key byte is recovered with <50 traces collected using the ChipWhisperer platform. The entire 256-bit secret key of SNOW-V can be recovered incrementally using the proposed SCA attack. Finally, we suggest low-overhead countermeasures that can be used to prevent these SCA attacks. |
| title | SNOW-SCA: ML-assisted Side-Channel Attack on SNOW-V |
| topic | Cryptography and Security Machine Learning Networking and Internet Architecture E.3 |
| url | https://arxiv.org/abs/2403.08267 |