{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,24]],"date-time":"2026-01-24T23:44:43Z","timestamp":1769298283341,"version":"3.49.0"},"reference-count":22,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2016,2,20]],"date-time":"2016-02-20T00:00:00Z","timestamp":1455926400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100000038","name":"NSERC","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Blackberry"},{"name":"OCE"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2016,2,20]]},"abstract":"<jats:p>Although HMAC-SHA has been standardized for over a decade, few published attacks on the single-cycle round implementation exist. In this research, new attack techniques are provided, for the first time, (1) to help to discriminate between values of secret intermediate variables within HMAC and (2) to reduce the large word size complexity. Preaveraging and carry propagate techniques are proposed using chosen plaintexts and shown to significantly reduce the complexity and runtimes for side-channel analysis of an Altera FPGA platform. This research is important for advancing side channel analysis of complex embedded ASICs and ensuring secure implementations in future embedded ubiquitous devices.<\/jats:p>","DOI":"10.1145\/2794093","type":"journal-article","created":{"date-parts":[[2016,2,22]],"date-time":"2016-02-22T13:07:16Z","timestamp":1456146436000},"page":"1-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Preaveraging and Carry Propagate Approaches to Side-Channel Analysis of HMAC-SHA256"],"prefix":"10.1145","volume":"15","author":[{"given":"Catherine H.","family":"Gebotys","sequence":"first","affiliation":[{"name":"University of Waterloo, Waterloo, Ontario Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Brian A.","family":"White","sequence":"additional","affiliation":[{"name":"University of Waterloo, Waterloo, Ontario Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Edgar","family":"Mateos","sequence":"additional","affiliation":[{"name":"University of Waterloo, Waterloo, Ontario Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2016,2,20]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85886-7_24"},{"key":"e_1_2_1_2_1","volume-title":"Proceedings of International Conference on Security and Cryptography (SECRYPT\u201913)","author":"Belaid Sonia","year":"2013"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/646761.706031"},{"key":"e_1_2_1_4_1","series-title":"Lecture Notes in Computer Science","volume-title":"Proceedings of Cryptographic Hardware and Embedded Systems (CHES\u201904)","author":"Brier Eric"},{"key":"e_1_2_1_5_1","volume-title":"Proceedings of Field Programmable Logic and Applications (FPL\u201905)","author":"Carlier V."},{"key":"e_1_2_1_6_1","unstructured":"FIPS. 2002. Secure Hash standard FIPS 180--2 August 2002.  FIPS. 2002. Secure Hash standard FIPS 180--2 August 2002."},{"key":"e_1_2_1_7_1","unstructured":"FIPS. 2008a. Secure Hash standard FIPS 180--3 2008.  FIPS. 2008a. Secure Hash standard FIPS 180--3 2008."},{"key":"e_1_2_1_8_1","unstructured":"FIPS. 2012. Secure Hash standard FIPS 180--4 March 2012.  FIPS. 2012. Secure Hash standard FIPS 180--4 March 2012."},{"key":"e_1_2_1_9_1","unstructured":"FIPS. 2008b. The keyed-hash message authentication code (HMAC) FIPS Pub 198 July 2008.  FIPS. 2008b. The keyed-hash message authentication code (HMAC) FIPS Pub 198 July 2008."},{"key":"e_1_2_1_10_1","unstructured":"FIPS. 2014. SHA-3 Standard: Permutation-based hash and extendable-output functions. Draft FIPS PUB 202 May 2014.  FIPS. 2014. SHA-3 Standard: Permutation-based hash and extendable-output functions. Draft FIPS PUB 202 May 2014."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85053-3_13"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04138-9_6"},{"key":"e_1_2_1_13_1","first-page":"2011","article-title":"FPGA Implementation of an HMAC Processor Based on the SHA-2 Family of Hash Functions","author":"Juliato Marcio","year":"2011","journal-title":"Center for Applied Cryptographic Research Technical Report CACR"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1515\/jmc-2013-5004"},{"key":"e_1_2_1_15_1","volume-title":"Proceedings of Advances of Cryptology (Crypto\u201999)","volume":"1666","author":"Kocher Paul"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC2104"},{"key":"e_1_2_1_17_1","volume-title":"Proceedings of Field Programmable Logic and Applications (FPL\u201912)","author":"Mane S."},{"key":"e_1_2_1_18_1","volume-title":"Proceedings of the 8th International Workshop on Information Security Applications (WISA\u201907)","volume":"4867","author":"McEvoy Robert"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2435264.2435282"},{"key":"e_1_2_1_20_1","volume-title":"RSA Conference","author":"Rohatgi Pankaj","year":"2013"},{"key":"e_1_2_1_21_1","volume-title":"Proceedings of the IET Irish Signals and Systems Conference (ISSC\u201907)","author":"Tunstall M."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/11535218_2"}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2794093","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2794093","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T19:04:26Z","timestamp":1750273466000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2794093"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,2,20]]},"references-count":22,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2016,2,20]]}},"alternative-id":["10.1145\/2794093"],"URL":"https:\/\/doi.org\/10.1145\/2794093","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"value":"1539-9087","type":"print"},{"value":"1558-3465","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,2,20]]},"assertion":[{"value":"2015-01-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-06-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-02-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}