International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Side Channel Attack On Stream Ciphers: A Three-Step Approach To State/Key Recovery

Satyam Kumar , Indian Institute of Technology, Madras
Vishnu Asutosh Dasu , TCS Research and Innovation, India
Anubhab Baksi , Nanyang Technological University, Singapore
Santanu Sarkar , Indian Institute of Technology, Madras
Dirmanto Jap , Nanyang Technological University, Singapore
Jakub Breier , Silicon Austria Labs, Graz, Austria
Shivam Bhasin , Temasek Labs, Nanyang Technological University
Search ePrint
Search Google
Presentation: Slides
Abstract: Side Channel Analysis (SCA) exploits the physical information leakage (such as electromagnetic emanation) from a device that performs some cryptographic operation and poses a serious threat in the present IoT era. In the last couple of decades, there have been a large body of research works dedicated to streamlining/improving the attacks or suggesting novel countermeasures to thwart those attacks. However, a closer inspection reveals that a vast majority of published works in the context of symmetric key cryptography is dedicated to block ciphers (or similar designs). This leaves the problem for the stream ciphers wide open. There are few works here and there, but a generic and systematic framework appears to be missing from the literature. Motivating by this observation, we explore the problem of SCA on stream ciphers with extensive details. Loosely speaking, our work picks up from the recent TCHES'21 paper by Sim, Bhasin and Jap. We present a framework by extending the efficiency of their analysis, bringing it into more practical terms. In a nutshell, we develop an automated framework that works as a generic tool to perform SCA on any stream cipher or a similar structure. It combines multiple automated tools (such as, machine learning, mixed integer linear programming, satisfiability modulo theory) under one umbrella, and acts as an end-to-end solution (taking side channel traces and returning the secret key). Our framework efficiently handles noisy data and works even after the cipher reaches its pseudo-random state. We demonstrate its efficacy by taking electromagnetic traces from a 32-bit software platform and performing SCA on a high-profile stream cipher, Trivium, which is also an ISO standard. We show pragmatic key recovery on Trivium during its initialization and also after the cipher reaches its pseudo-random state (i.e., producing key-stream). Our source code will be made available as open-source.
  title={Side Channel Attack On Stream Ciphers: A Three-Step Approach To State/Key Recovery},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  volume={2022, Issue 2},
  author={Satyam Kumar and Vishnu Asutosh Dasu and Anubhab Baksi and Santanu Sarkar and Dirmanto Jap and Jakub Breier and Shivam Bhasin},