Abstract

Differential Power Analysis, first introduced by Kocher et al. in [14], is a powerful technique allowing to recover secret smart card information by monitoring power signals. In [14] a specific DPA attack against smart-cards running the DES algorithm was described. As few as 1000 encryptions were sufficient to recover the secret key. In this paper we generalize DPA attack to elliptic curve (EC) cryptosystems and describe a DPA on EC Diffie-Hellman key exchange and EC El-Gamal type encryption. Those attacks enable to recover the private key stored inside the smart-card. Moreover, we suggest countermeasures that thwart our attack.

Citations

2292	New directions in cryptography - Diffie, Hellmen - 1976
559	Elliptic curve cryptosystem - Koblitz - 1987
419	Uses of elliptic curves in cryptography - Miller - 1985
368	Security without identification: transaction systems to make big brother obsolete - Chaum - 1985
321	Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems - Kocher - 1996
262	Elliptic Curve Public Key Cryptosystems - Menezes - 1993
253	A public-key cryptosystem and a signature scheme based on discrete logarithms - Gamal - 1985
234	New directions in cryptography - e, Hellman - 1976
138	A survey of fast exponentiation methods - Gordon - 1998
86	Speeding up the computations on an elliptic curve using addition-subtraction chains - Morain, Olivos - 1990
56	Introduction to Differential Power Analysis and Related Attacks. Whitepaper, Cryptography Research - Kocher, Jaffe, et al. - 1998
49	Seminumerical Algorithms, The Art of - Knuth - 1997
34	Resistance Against Implementation Attacks. A Comparative Study of the AES Proposals - Daemen, Rijmen - 1999
32	Advanced Encryption Standard," Federal Information Processing Stan- dard - FIPS
29	Speeding up elliptic cryptosystems by using a signed binary window method - Koyama, Tsuruoka - 1992
27	Timing Attacks on Implementations of Di#e-Hellman, RSA, DSS, and Other Systems - Kocher - 1996
26	A cautionary note regarding evaluation of AES candidates on Smart-Cards - Chari, Jutla, et al. - 1999
24	Power analysis of the key scheduling of the AES candidates - Biham, Shamir - 1999
15	Fast exponentiation with precomputation (extended abstract - Brickell, Gordon, et al. - 1992
12	Introduction to Dierential Power Analysis and Related Attacks - Kocher, Jae, et al. - 1998
1	Standard Specifications for Public Key Cryptography - P1363D7 - 1998