Fast Software Encryption

Willi Meier

ISBN 10: 3540221719 / ISBN 13: 9783540221715

Published by Springer Berlin Heidelberg Jun 2004, 2004

About this Item

This item is printed on demand - it takes 3-4 days longer - Neuware -2.1 Di erential Power Analysis Di erential Power Analysis (DPA) was introduced by Kocher, Ja e and Jun in 1998 [13] and published in 1999 [14]. The basic idea is to make use of potential correlations between the data handled by the micro-controller and the electric consumption measured values. Since these correlations are often very low, s- tistical methods must be applied to deduce su cient information from them. Theprinciple ofDPAattacksconsistsincomparingconsumptionvalues m- suredonthe real physical device (for instance a GSM chip or a smart card)with values computed in an hypothetical model of this device (the hypotheses being made among others on the nature of the implementation, and chie y on a part of the secret key). By comparing these two sets of values, the attacker tries to recover all or part of the secret key. The initial target of DPA attacks was limited to symmetric algorithms. V- nerability of DES rst shown by Kocher, Ja e and Jun [13, 14] wasfurther studied by Goubin and Patarin [11, 12], Messerges, Dabbish, Sloan [16]and Akkar, B evan, Dischamp, Moyart [2]. Applications of these attacks were also largely taken into account during the AES selection process, notably by Biham, Shamir [4], Chari, Jutla, Rao, Rohatgi [5] and Daemen, Rijmen [8]. 504 pp. Englisch.

Seller Inventory # 9783540221715

Bibliographic Details

• Title: Fast Software Encryption
• Publisher: Springer Berlin Heidelberg Jun 2004
• Publication Date: 2004
• Language: English
• ISBN 10: 3540221719
• ISBN 13: 9783540221715
• Binding: Taschenbuch
• Condition: Neu
• Dimensions: 235W x 155H x 28D millimeters 235 millimeters width by 155 millimeters height by 28 millimeters depth
• Weight: 756 grams

About this title

Synopsis

2.1 Di?erential Power Analysis Di?erential Power Analysis (DPA) was introduced by Kocher, Ja?e and Jun in 1998 [13] and published in 1999 [14]. The basic idea is to make use of potential correlations between the data handled by the micro-controller and the electric consumption measured values. Since these correlations are often very low, s- tistical methods must be applied to deduce su?cient information from them. Theprinciple ofDPAattacksconsistsincomparingconsumptionvalues m- suredonthe real physical device (for instance a GSM chip or a smart card)with values computed in an hypothetical model of this device (the hypotheses being made among others on the nature of the implementation, and chie?y on a part of the secret key). By comparing these two sets of values, the attacker tries to recover all or part of the secret key. The initial target of DPA attacks was limited to symmetric algorithms. V- nerability of DES - ?rst shown by Kocher, Ja?e and Jun [13, 14]-wasfurther studied by Goubin and Patarin [11, 12], Messerges, Dabbish, Sloan [16]and Akkar, B´ evan, Dischamp, Moyart [2]. Applications of these attacks were also largely taken into account during the AES selection process, notably by Biham, Shamir [4], Chari, Jutla, Rao, Rohatgi [5] and Daemen, Rijmen [8].