{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,13]],"date-time":"2026-01-13T21:00:27Z","timestamp":1768338027068,"version":"3.49.0"},"reference-count":90,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2018,2,1]],"date-time":"2018-02-01T00:00:00Z","timestamp":1517443200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2018,2,1]],"date-time":"2018-02-01T00:00:00Z","timestamp":1517443200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2018,2,1]],"date-time":"2018-02-01T00:00:00Z","timestamp":1517443200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2018,2,1]],"date-time":"2018-02-01T00:00:00Z","timestamp":1517443200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Des. Test"],"published-print":{"date-parts":[[2018,2]]},"DOI":"10.1109\/mdat.2017.2766166","type":"journal-article","created":{"date-parts":[[2017,10,24]],"date-time":"2017-10-24T18:12:20Z","timestamp":1508868740000},"page":"74-89","source":"Crossref","is-referenced-by-count":8,"title":["Identifying and Eliminating Side-Channel Leaks in Programmable Systems"],"prefix":"10.1109","volume":"35","author":[{"given":"Elke","family":"De Mulder","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas","family":"Eisenbarth","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4586-5476","authenticated-orcid":false,"given":"Patrick","family":"Schaumont","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-42033-7_25"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-016-0120-y"},{"key":"ref71","article-title":"A testing methodology for side-channel resistance validation","author":"goodwill","year":"2011","journal-title":"Proc Non-Invasive Attack Testing Workshop (NIST)"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-06734-6_25"},{"key":"ref76","article-title":"Efficient side channel testing for public key algorithms: RSA case study","author":"jaffe","year":"2011","journal-title":"NIST Non-invasive Attack Testing Workshop"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02384-2_26"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74735-2_6"},{"key":"ref74","first-page":"138","article-title":"How (not) to use Welch’s t-test in sidechannel security evaluations","volume":"2017","author":"standaert","year":"2017","journal-title":"IACR Cryptology ePrint Archive"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2004.1268856"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-43283-0_10"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21040-2_15"},{"key":"ref79","first-page":"37","article-title":"On the importance of checking cryptographic protocols for faults (extended abstract)","author":"boneh","year":"1997","journal-title":"Proc Int Conf Theory Appl Crypt Tech -Advances in Cryptology (EUROCRYPT ’97)"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2005.862437"},{"key":"ref32","first-page":"431","article-title":"Cacheaudit: A tool for the static analysis of cache side channels","author":"doychev","year":"2013","journal-title":"In Proceedings of the 22nd USENIX Security Symposium (USENIX Security '13)"},{"key":"ref31","author":"langley","year":"2010","journal-title":"ctgrind"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33481-8_9"},{"key":"ref37","first-page":"403","article-title":"A dynamic and differential CMOS logic with signal independent power consumption to withstand differential power analysis on smart cards","author":"tiri","year":"2002","journal-title":"Proc 28th European Solid-State Circuits Conf"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34961-4_44"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85053-3_15"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15031-9_7"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_27"},{"key":"ref62","first-page":"122","article-title":"Combining leakage resilient PRFs and shuffling— Towards bounded security for small embedded devices","author":"grosso","year":"2014","journal-title":"Proc 13th Int Conf Smart Card Res Adv Appl (CARDIS 2014)"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-014-0079-5"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-013-0212-y"},{"key":"ref28","article-title":"Inferring fine-grained control flow inside SGX enclaves with branch shadowing","author":"lee","year":"2016"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27257-8_8"},{"key":"ref27","doi-asserted-by":"crossref","first-page":"312","DOI":"10.1145\/1229285.1266999","article-title":"On the power of simple branch prediction analysis","author":"acii\u00e7mez","year":"2007","journal-title":"Proc 2nd ACM Symp Info Comp Commun Security (ASIACCS ’07)"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12678-9_17"},{"key":"ref66","article-title":"Keymill: Side-channel résilient key generator","author":"taha","year":"2016","journal-title":"Proc 23rd Conf Selected Areas Crypt (SAC 2016)"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-16295-9_5"},{"key":"ref67","article-title":"A key management scheme for DPA-protected authenticated encryption","author":"taha","year":"2013","journal-title":"Proc Directions in Authenticated Ciphers (DIAC 2013)"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33027-8_12"},{"key":"ref69","first-page":"233","article-title":"On the security of fresh re-keying to counteract side-channel and fault attacks","author":"dobraunig","year":"2014","journal-title":"Proc 13th Int Conf Smart Card Res Adv Appl (CARDIS 2014)"},{"key":"ref2","first-page":"219","article-title":"The temperature side channel and heating fault attacks","author":"hutter","year":"2013","journal-title":"Proc 12th Int Conf Smart Card Res Adv Appl (CARDIS)"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-71817-0_18"},{"key":"ref20","first-page":"565","article-title":"Drama: Exploiting dram addressing for cross-CPU attacks","author":"pessl","year":"2016","journal-title":"25th USENIX Security Symposium (USENIX Security 16)"},{"key":"ref22","author":"bernstein","year":"2004","journal-title":"Cache-timing attacks on AES"},{"key":"ref21","first-page":"225","article-title":"Predicting secret keys via branch prediction","author":"acii\u00e7mez","year":"2007","journal-title":"Proc The Cryptographer s Track at RSA Conf"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.42"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-009-9049-y"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.44"},{"key":"ref25","first-page":"176","article-title":"Side-channel analysis of cryptographic software via early-terminating multiplications","author":"gro\u00dfsch\u00e4dl","year":"2009","journal-title":"Proc Int Conf Inf Security Cryptol"},{"key":"ref50","first-page":"343","article-title":"A simple power-analysis (SPA) attack on implementations of the AES key expansion","author":"mangard","year":"2002","journal-title":"Proc Int Conf Inf Security Cryptol"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20465-4_6"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04138-9_15"},{"key":"ref59","author":"kocher","year":"2016","journal-title":"Secure Boot with Resistance to Differential Power Analysis and Other External Monitoring Attacks"},{"key":"ref58","author":"gammel","year":"2009","journal-title":"Generating a session key for authentication and secure data transfer"},{"key":"ref57","author":"kocher","year":"1999","journal-title":"Leak-resistant Cryptographic Indexed Key Update"},{"key":"ref56","first-page":"1","article-title":"Lightweight side channel résistance: Threshold implementations of Simon","volume":"pp","author":"shahverdi","year":"2016","journal-title":"IEEE Trans Comput"},{"key":"ref55","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1007\/978-3-319-14123-7_13","article-title":"Efficient and first-order DPA resistant implementations of keccak","author":"bilgin","year":"2014","journal-title":"Smart Card Research and Advanced Applications"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-010-9086-6"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2996366.2996428"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-06734-6_17"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-48324-4_31"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-013-0067-1"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53140-2_18"},{"key":"ref12","first-page":"291","article-title":"The montgomery powering ladder","author":"joye","year":"2002","journal-title":"Proc 4th Int Workshop Crypt Hardware Embed Sys (CHES 2002)"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-011-0006-y"},{"key":"ref14","first-page":"119","author":"mangard","year":"2007","journal-title":"Power Analysis Attacks-revealing the Secrets of Smart Cards"},{"key":"ref15","first-page":"381","author":"rohatgi","year":"2009","journal-title":"Improved Techniques for Side-Channel Analysis"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2014.15"},{"key":"ref16","first-page":"449","article-title":"One for all—all for one: Unifying standard DPA attacks","volume":"2009","author":"mangard","year":"2009","journal-title":"IACR Cryptology ePrint Archive"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2012.18"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-016-0141-6"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_17"},{"key":"ref18","first-page":"35","article-title":"Chosen-message spa attacks against FPGA-based RSA hardware implementations","author":"miyamoto","year":"2008","journal-title":"Proc Int Conf Field Program Logic and Appl"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664273"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.43"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15031-9_22"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44371-2_25"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694372"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33027-8_3"},{"key":"ref6","author":"mangard","year":"2007","journal-title":"Power Analysis Attacks–Revealing the Secrets of Smart Cards"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15031-9_22"},{"key":"ref85","first-page":"53","article-title":"Verifying constant-time implementations","author":"almeida","year":"2016","journal-title":"25th USENIX Security Symposium (USENIX Security 16)"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-48324-4_11"},{"key":"ref49","article-title":"Does coupling affect the security of masked implementations?","author":"cnudde","year":"2016"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2017.7951817"},{"key":"ref7","article-title":"Power analysis using low-cost hardware: Lab setup & simple targets","author":"o\u2019flynn","year":"2013","journal-title":"Proc 15th Int Workshop on Crypt Hardware Embed Sys (CHES 2013)"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33027-8_4"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08867-9_8"},{"key":"ref9","article-title":"Side-channel protections for cryptographic instruction set extensions","author":"saab","year":"0"},{"key":"ref46","doi-asserted-by":"crossref","first-page":"529","DOI":"10.1007\/11935308_38","article-title":"Threshold implémentations against side-channel attacks and glitches","author":"nikova","year":"2006","journal-title":"Information and Communications Security"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2996366.2996426"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-47989-6_37"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-45608-8_18"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15031-9_28"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-68697-5_9"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-012-0033-3"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-014-0073-y"}],"container-title":["IEEE Design & Test"],"original-title":[],"link":[{"URL":"http:\/\/ieeexplore.ieee.org\/ielaam\/6221038\/8281094\/8081798-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6221038\/8281094\/08081798.pdf?arnumber=8081798","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,8,5]],"date-time":"2022-08-05T06:17:05Z","timestamp":1659680225000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8081798\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,2]]},"references-count":90,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/mdat.2017.2766166","relation":{},"ISSN":["2168-2356","2168-2364"],"issn-type":[{"value":"2168-2356","type":"print"},{"value":"2168-2364","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,2]]}}}