{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T03:19:22Z","timestamp":1760239162236,"version":"build-2065373602"},"reference-count":23,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2020,9,25]],"date-time":"2020-09-25T00:00:00Z","timestamp":1600992000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["779882"],"award-info":[{"award-number":["779882"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Cryptography"],"abstract":"<jats:p>Cryptographic implementations need to be robust amidst the widespread use of crypto-libraries and attacks targeting their implementation, such as side-channel attacks (SCA). Many certification schemes, such as Common Criteria and FIPS 140, continue without addressing side-channel flaws. Research works mostly tackle sophisticated attacks with simple use-cases, which is not the reality where end-to-end evaluation is not trivial. In this study we used all due diligence to assess the invulnerability of a given implementation from the shoes of an evaluator. In this work we underline that there are two kinds of SCA: horizontal and vertical. In terms of quotation, measurement and exploitation, horizontal SCA is easier. If traces are constant-time, then vertical attacks become convenient, since there is no need for specific alignment (\u201cvalue based analysis\u201d). We introduce our new methodology: Vary the key to select sensitive samples, where the values depend upon the key, and subsequently vary the mask to uncover unmasked key-dependent leakage, i.e., the flaws. This can be done in the source code (pre-silicon) for the designer or on the actual traces (post-silicon) for the test-lab. We also propose a methodology for quotations regarding SCA unlike standards that focus on only one aspect (like number of traces) and forgets about other aspects (such as equipment; cf. ISO\/IEC 20085-1.<\/jats:p>","DOI":"10.3390\/cryptography4040027","type":"journal-article","created":{"date-parts":[[2020,9,25]],"date-time":"2020-09-25T08:57:32Z","timestamp":1601024252000},"page":"27","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Side-Channel Evaluation Methodology on Software"],"prefix":"10.3390","volume":"4","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5044-3534","authenticated-orcid":false,"given":"Sylvain","family":"Guilley","sequence":"first","affiliation":[{"name":"Secure-IC S.A.S., Tour Montparnasse, 75015 Paris, France"},{"name":"Telecom-ParisTech, 91120 Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Khaled","family":"Karray","sequence":"additional","affiliation":[{"name":"Secure-IC S.A.S., Tour Montparnasse, 75015 Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas","family":"Perianin","sequence":"additional","affiliation":[{"name":"Secure-IC K.K., Hirakawa-cho, Chiyoda-ku, Tokyo 102-0093, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ritu-Ranjan","family":"Shrivastwa","sequence":"additional","affiliation":[{"name":"Secure-IC S.A.S., Tour Montparnasse, 75015 Paris, France"},{"name":"Telecom-ParisTech, 91120 Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Youssef","family":"Souissi","sequence":"additional","affiliation":[{"name":"Secure-IC S.A.S., Tour Montparnasse, 75015 Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sofiane","family":"Takarabt","sequence":"additional","affiliation":[{"name":"Secure-IC S.A.S., Tour Montparnasse, 75015 Paris, France"},{"name":"Telecom-ParisTech, 91120 Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,9,25]]},"reference":[{"key":"ref_1","unstructured":"ISO\/IEC JTC 1\/SC 27\/WG 3. ISO\/IEC 20085-1:2019 (en) (2020, September 24). Information technology Security Techniques\u2014Test Tool Requirements and Test Tool Calibration Methods for Use in Testing Non-Invasive Attack Mitigation Techniques in Cryptographic Module \u2014Part 1: Test Tools and Techniques. Available online: https:\/\/www.iso.org\/standard\/70081.html."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Wu, M., Guo, S., Schaumont, P., and Wang, C. (2018, January 16\u201321). Eliminating timing side-channel leaks using program repair. Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, Amsterdam, The Netherlands.","DOI":"10.1145\/3213846.3213851"},{"key":"ref_3","unstructured":"Walters, A.D., and Kedaigle, E. (2020, September 24). SLEAK: A Side-Channel Leakage Evaluator and Analysis Kit. Available online: https:\/\/www.mitre.org\/publications\/technical-papers\/sleak-a-side-channel-leakage-evaluator-and-analysis-kit."},{"key":"ref_4","unstructured":"Weiser, S., Zankl, A., Spreitzer, R., Miller, K., Mangard, S., and Sigl, G. (2018, January 15\u201317). DATA\u2013Differential Address Trace Analysis: Finding Address-based Side-Channels in Binaries. Proceedings of the 27th USENIX Security Symposium (USENIX Security 18), Baltimore, MD, USA."},{"key":"ref_5","unstructured":"Whitnall, C., and Oswald, E. (2020, September 24). A Cautionary Note Regarding the Usage of Leakage Detection Tests in Security Evaluation. Cryptology ePrint Archive, Report 2019\/703. Available online: https:\/\/eprint.iacr.org\/2019\/703."},{"key":"ref_6","unstructured":"Mangard, S., Oswald, E., and Popp, T. (2006). Power Analysis Attacks: Revealing the Secrets of Smart Cards, Springer. Available online: http:\/\/www.dpabook.org\/."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Fischer, W., and Homma, N. (2017). Convolutional Neural Networks with Data Augmentation Against Jitter-Based Countermeasures. Cryptographic Hardware and Embedded Systems\u2013CHES 2017, Springer.","DOI":"10.1007\/978-3-319-66787-4"},{"key":"ref_8","unstructured":"Carr\u00e9, S., Dyseryn, V., Facon, A., Guilley, S., and Perianin, T. (2020). End-to-end automated cache-timing attack driven by Machine Learning. J. Cryptogr. Eng."},{"key":"ref_9","first-page":"104","article-title":"Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems","volume":"Volume 1109","author":"Koblitz","year":"1996","journal-title":"Lecture Notes in Computer Science, Proceedings of the Advances in Cryptology CRYPTO \u201996, 16th Annual International Cryptology Conference, Santa Barbara, CA, USA, 18\u201322 August 1996"},{"key":"ref_10","first-page":"413","article-title":"Provably Secure Higher-Order Masking of AES","volume":"Volume 6225","author":"Mangard","year":"2010","journal-title":"Lecture Notes in Computer Science, Proceedings of the Cryptographic Hardware and Embedded Systems, CHES 2010, Santa Barbara, CA, USA, 17\u201320 August 2010"},{"key":"ref_11","first-page":"441","article-title":"Higher Order Masking of Look-Up Tables","volume":"Volume 8441","author":"Nguyen","year":"2014","journal-title":"Lecture Notes in Computer Science, Proceedings of the Advances in Cryptology \u2014EUROCRYPT 2014, Copenhagen, Denmark, 11\u201315 May 2014"},{"key":"ref_12","unstructured":"Coron, J.S. (2020, September 24). HTable Countermeasure Against Side-Channel Attacks. Available online: https:\/\/github.com\/coron\/htable."},{"key":"ref_13","first-page":"140","article-title":"Side-Channel Analysis of Six SHA-3 Candidates","volume":"Volume 6225","author":"Peyrin","year":"2010","journal-title":"Lecture Notes in Computer Science, Proceedings of the Cryptographic Hardware and Embedded Systems, CHES 2010, Santa Barbara, CA, USA, 17\u201320 August 2010"},{"key":"ref_14","first-page":"13","article-title":"Cache-Timing Attacks Still Threaten IoT Devices","volume":"Volume 11445","author":"Carlet","year":"2019","journal-title":"Lecture Notes in Computer Science, Codes, Cryptology and Information Security\u2014Third International Conference (C2SI 2019), Rabat, Morocco, 22\u201324 April 2019"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Fischer, W., and Homma, N. (2017). Sliding Right into Disaster: Left-to-Right Sliding Windows Leak. Cryptographic Hardware and Embedded Systems\u2013CHES 2017, Springer.","DOI":"10.1007\/978-3-319-66787-4"},{"key":"ref_16","first-page":"109","article-title":"A Timing Attack against RSA with the Chinese Remainder Theorem","volume":"Volume 1965","author":"Paar","year":"2000","journal-title":"Lecture Notes in Computer Science, Proceedings of the Cryptographic Hardware and Embedded Systems\u2014CHES 2000, Worcester, MA, USA, 17\u201318 August 2000"},{"key":"ref_17","first-page":"88","article-title":"Dismantling Real-World ECC with Horizontal and Vertical Template Attacks","volume":"Volume 9689","author":"Standaert","year":"2016","journal-title":"Lecture Notes in Computer Science, Proceedings of the Constructive Side-Channel Analysis and Secure Design\u20147th International Workshop (COSADE 2016), Graz, Austria, 14\u201315 April 2016"},{"key":"ref_18","first-page":"18","article-title":"Timing Attack against Protected RSA-CRT Implementation Used in PolarSSL","volume":"Volume 7779","author":"Dawson","year":"2013","journal-title":"Lecture Notes in Computer Science, Proceedings of the Topics in Cryptology-CT-RSA 2013\u2014The Cryptographers\u2019 Track at the RSA Conference 2013, San Francisco, CA, USA, 25 February\u20131 March, 2013"},{"key":"ref_19","first-page":"256","article-title":"A Critical Analysis of ISO 17825 (\u2019Testing Methods for the Mitigation of Non-invasive Attack Classes Against Cryptographic Modules\u2019)","volume":"Volume 11923","author":"Galbraith","year":"2019","journal-title":"Lecture Notes in Computer Science, Proceedings of the Advances in Cryptology-ASIACRYPT 2019-5th International Conference on the Theory and Application of Cryptology and Information Security, Kobe, Japan, 8\u201312 December 2019"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Goguen, J.A., and Meseguer, J. (1982, January 26\u201328). Security Policies and Security Models. Proceedings of the 1982 IEEE Symposium on Security and Privacy, Oakland, CA, USA.","DOI":"10.1109\/SP.1982.10014"},{"key":"ref_21","unstructured":"ISO\/IEC JTC 1\/SC 27\/WG 3 (2020, September 24). ISO\/IEC 17825:2016: Information Technology\u2014Security Techniques\u2014Testing Methods for the Mitigation of Non-Invasive Attack Classes Against Cryptographic Modules. Available online: https:\/\/www.iso.org\/standard\/60612.html."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"26","DOI":"10.22237\/jmasm\/1257035100","article-title":"New effect size rules of thumb","volume":"8","author":"Sawilowsky","year":"2009","journal-title":"J. Mod. Appl. Stat. Methods"},{"key":"ref_23","unstructured":"Menezes, A.J., van Oorschot, P.C., and Vanstone, S.A. (1996). Handbook of Applied Cryptography, CRC Press. Available online: http:\/\/www.cacr.math.uwaterloo.ca\/hac\/."}],"container-title":["Cryptography"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2410-387X\/4\/4\/27\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T10:13:41Z","timestamp":1760177621000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2410-387X\/4\/4\/27"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,9,25]]},"references-count":23,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2020,12]]}},"alternative-id":["cryptography4040027"],"URL":"https:\/\/doi.org\/10.3390\/cryptography4040027","relation":{},"ISSN":["2410-387X"],"issn-type":[{"type":"electronic","value":"2410-387X"}],"subject":[],"published":{"date-parts":[[2020,9,25]]}}}