DMCA
Differential Fault Analysis of Secret Key Cryptosystems (1997)
| Citations: | 315 - 3 self |
BibTeX
@MISC{Biham97differentialfault,
author = {Eli Biham and Adi Shamir},
title = {Differential Fault Analysis of Secret Key Cryptosystems},
year = {1997}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
In September 1996 Boneh, Demillo, and Lipton from Bellcore announced a new type of cryptanalytic attack which exploits computational errors to find cryptographic keys. Their attack is based on algebraic properties of modular arithmetic, and thus it is applicable only to public key cryptosystems such as RSA, and not to secret key algorithms such as the Data Encryption Standard (DES). In this paper, we describe a related attack, which we call Differential Fault Analysis, or DFA, and show that it is applicable to almost any secret key cryptosystem proposed so far in the open literature. Our DFA attack can use various fault models and various cryptanalytic techniques to recover the cryptographic secrets hidden in the tamper-resistant device. In particular, we have demonstrated that under the same hardware fault model used by the Bellcore researchers, we can extract the full DES key from a sealed tamper-resistant DES encryptor by analyzing between 50 and 200 ciphertexts generated from unknown but related plaintexts. In the second part of the paper we develop techniques to identify the keys of completely unknown ciphers (such as SkipJack) sealed in tamper-resistant devices, and to reconstruct the complete specification of DES-like unknown ciphers. In the last part of the paper, we consider a different fault model, based on permanent hardware faults, and show that it can be used to break DES by analyzing a small number of ciphertexts generated from completely unknown and unrelated plaintexts.
Keyphrases
differential fault analysis secret key cryptosystems tamper-resistant device second part open literature dfa attack different fault model unknown cipher hardware fault model tamper-resistant de encryptor data encryption standard secret key cryptosystem full de key bellcore researcher permanent hardware fault cryptanalytic attack related attack various fault model various cryptanalytic technique cryptographic key public key cryptosystems unrelated plaintexts small number related plaintexts last part complete specification key algorithm new type algebraic property cryptographic secret computational error des-like unknown cipher
