Plaintext: A Missing Feature for Enhancing the Power of Deep Learning in Side-Channel Analysis?

Breaking multiple layers of side-channel countermeasures

  • Anh-Tuan Hoang Centre for Secure Information Technologies (CSIT), ECIT, Queen’s University Belfast, United Kingdom
  • Neil Hanley Centre for Secure Information Technologies (CSIT), ECIT, Queen’s University Belfast, United Kingdom
  • Maire O’Neill Centre for Secure Information Technologies (CSIT), ECIT, Queen’s University Belfast, United Kingdom
Keywords: Deep learning, CNN, AES, Plaintext feature extension, integer encoding, one-hot encoding, key reveal, higher-order masking

Abstract

Deep learning (DL) has proven to be very effective for image recognition tasks, with a large body of research on various model architectures for object classification. Straight-forward application of DL to side-channel analysis (SCA) has already shown promising success, with experimentation on open-source variable key datasets showing that secret keys can be revealed with 100s traces even in the presence of countermeasures. This paper aims to further improve the application of DL for SCA, by enhancing the power of DL when targeting the secret key of cryptographic algorithms when protected with SCA countermeasures. We propose a new model, CNN-based model with Plaintext feature extension (CNNP) together with multiple convolutional filter kernel sizes and structures with deeper and narrower neural networks, which has empirically proven its effectiveness by outperforming reference profiling attack methods such as template attacks (TAs), convolutional neural networks (CNNs) and multilayer perceptron (MLP) models. Our model generates state-of-the art results when attacking the ASCAD variable-key database, which has a restricted number of training traces per key, recovering the key within 40 attack traces in comparison with order of 100s traces required by straightforward machine learning (ML) application. During the profiling stage an attacker needs no additional knowledge on the implementation, such as the masking scheme or random mask values, only the ability to record the power consumption or electromagnetic field traces, plaintext/ciphertext and the key. Additionally, no heuristic pre-processing is required in order to break the high-order masking countermeasures of the target implementation.

Published
2020-08-26
How to Cite
Hoang, A.-T., Hanley, N., & O’Neill, M. (2020). Plaintext: A Missing Feature for Enhancing the Power of Deep Learning in Side-Channel Analysis? Breaking multiple layers of side-channel countermeasures. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2020(4), 49-85. https://doi.org/10.13154/tches.v2020.i4.49-85
Section
Articles