5gaKanchAFD2

5 ms·

1. 1.▲
   by 5gaKanchAFD2 9y ago

   Yeah techniques like instruction re-ordering, messing with the clock, etc are legitimate options. However all they will effectively do is decrease the signal-to-noise ratio of the system; increasing the number of measurements the adversary
2. 2.▲
   by 5gaKanchAFD2 9y ago

   The interesting work here is definitely on the measurement/acquisition side. Ultimately if it's an unprotected AES you're going to be able to exploit some leakage given enough measurements. This is pretty consistent with rec
3. 3.▲
   by 5gaKanchAFD2 9y ago

   This is a common countermeasure. You need to be aware that you maybe just be moving the problem. In settings in which key agreement techniques aren't used you'll be deriving new symmetric keys from an initial secret using a KDF.
4. 4.▲
   by 5gaKanchAFD2 9y ago

   No algorithm is secure by design against these DPA attacks. They exploit data-dependencies. The only 'provably secure' (e.g., on paper (+)) countermeasure you can apply to these symmetric schemes is something typically called mas