Side-Channel Analysis in Hardware

Course guarantor:

Lecturer:

Tutor:

Supervisor:

Department of Digital Design

Synopsis:

This course is dedicated to so-called side-channel information leakage in hardware devices. It focuses on both theoretical analysis and practical attacks. Students get familiar with various kinds of side channels and they get deeper insight in power attacks. Students learn to implement various profiled and non-profiled attacks and get familiar with higher-order

attacks. They also get practice in both designing the SCA countermeasures and analyzing the amount and characteristics of the side-channel information leakage.

Requirements:

Basic knowledge of cryptographic algorithms and their implementation in HW, recommended completion of MIE-BHW

(NIE-BVS) and/or MIE-HWB courses.

Syllabus of lectures:

1. Introduction to side channels, information leakage, power consumption/EM radiation measurements

2. Formal model for side-channel attacks, differential power analysis, correlation power analysis

3. Mutual information analysis, Kolmogorov-Smirnov analysis

4. Template attacks, theoretical and experimental security metrics

5. Countermeasures based on Additional Modules, hiding

6. Countermeasures based on Secure Logic Styles, hiding

7. Countermeasures based on Module Alteration, masking

8. Attacks on protected implementations, univariate and multivariate higher order attacks, combining function

9. Machine learning in side-channel analysis, neural networks

10. Leakage assessment

11. Remote side-channel attacks, attacks on radio, attacks in cloud

12. Fault attacks, fault injection, combined attacks

13. Reserve

Syllabus of tutorials:

1. Equipment introduction

2. Measurement introduction, timing attacks

3. Attack realisation I

4. Attack realisation II

5. Attack realisation III

6. Attack realisation IV

7. Countermeasures|hiding

8. Countermeasures|masking I

9. Countermeasures|masking II

10. Higher-order analysis

11. Attacking protected implementations

12. Finishing and evaluation

13. Reserve

Study Objective:

Study materials:

See courses.fit.cvut.cz

Note:

The course is presented in Czech..

Nevertheless, there is an English equivalent NIE-HSC.

Further information:

https://courses.fit.cvut.cz/NI-HSC/

No time-table has been prepared for this course

The course is a part of the following study plans:

• Master specialization Computer Security, in Czech, 2020 (elective course)
• Master specialization Design and Programming of Embedded Systems, in Czech, 2020 (elective course)
• Master specialization Computer Systems and Networks, in Czech, 202 (elective course)
• Master specialization Management Informatics, in Czech, 2020 (elective course)
• Master specialization Software Engineering, in Czech, 2020 (elective course)
• Master specialization System Programming, in Czech, version from 2020 (elective course)
• Master specialization Web Engineering, in Czech, 2020 (elective course)
• Master specialization Knowledge Engineering, in Czech, 2020 (elective course)
• Master specialization Computer Science, in Czech, 2020 (elective course)
• Mgr. programme, for the phase of study without specialisation, ver. for 2020 and higher (elective course)
• Study plan for Ukrainian refugees (elective course)
• Master specialization System Programming, in Czech, version from 2023 (elective course)
• Master specialization Computer Science, in Czech, 2023 (elective course)
• Quantum Informatics (elective course)