{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T14:27:18Z","timestamp":1782829638370,"version":"3.54.5"},"reference-count":45,"publisher":"International Association for Cryptologic Research","license":[{"start":{"date-parts":[[2024,7,7]],"date-time":"2024-07-07T00:00:00Z","timestamp":1720310400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IACR CiC"],"accepted":{"date-parts":[[2024,9,2]]},"abstract":"<jats:p>Side-channel Collision Attacks (SCCA) is a classical method that exploits information dependency leaked during cryptographic operations. Unlike collision attacks that seek instances where two different inputs to a cryptographic algorithm yield identical outputs, SCCAs specifically target the internal state, where identical outputs are more likely. Although SCCA does not rely on the pre-assumption of the leakage model, it explicitly operates on precise trace segments reflecting the target operation, which is challenging to perform when the leakage measurements are noisy. Besides, its attack performance may vary dramatically, as it relies on selecting a reference byte (and its corresponding leakages) to \u201ccollide\u201d other bytes. A poor selection would lead to many bytes unrecoverable. These two facts make its real-world application problematic.<\/jats:p>\n          <jats:p> This paper addresses these challenges by introducing a novel plaintext-based SCCA. We leverage the bijective relationship between plaintext and secret data, using plaintext as labels to train profiling models to depict leakages from varying operations. By comparing the leakage representations produced by the profiling model instead of the leakage segmentation itself,  all secret key differences can be revealed simultaneously without processing leakage traces. Furthermore, we propose a novel error correction scheme to rectify false predictions further. Experimental results show that our approach significantly surpasses the state-of-the-art SCCA in both attack performance and computational complexity (e.g., training time reduced from approximately three hours to five minutes). These findings underscore our method's effectiveness and practicality in real-world attack scenarios. <\/jats:p>","DOI":"10.62056\/a36cy7qiu","type":"journal-article","created":{"date-parts":[[2024,10,7]],"date-time":"2024-10-07T15:13:33Z","timestamp":1728314013000},"update-policy":"https:\/\/doi.org\/10.62056\/adfjwm02dj","source":"Crossref","is-referenced-by-count":2,"title":["Plaintext-based Side-channel Collision Attack"],"prefix":"10.62056","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7139-732X","authenticated-orcid":false,"given":"Lichao","family":"Wu","sequence":"first","affiliation":[{"name":"Technical University of Darmstadt","place":["Darmstadt, Germany"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"S\u00e9bastien","family":"Tiran","sequence":"additional","affiliation":[{"name":"Independent Researcher","place":["Delft, The Netherlands"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3799-7636","authenticated-orcid":false,"given":"Guilherme","family":"Perin","sequence":"additional","affiliation":[{"name":"Leiden University","place":["Leiden, The Netherlands"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7509-4337","authenticated-orcid":false,"given":"Stjepan","family":"Picek","sequence":"additional","affiliation":[{"name":"Radboud University","place":["Nijmegen, The Netherlands"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"48349","published-online":{"date-parts":[[2024,10,7]]},"reference":[{"key":"ref1:schramm2003new","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1007\/978-3-540-39887-5_16","article-title":"A new class of collision attacks and its application to\n  DES","author":"Kai Schramm","year":"2003"},{"key":"ref2:Staib_Moradi_2023","doi-asserted-by":"publisher","first-page":"422","DOI":"10.46586\/tches.v2023.i3.422-444","article-title":"Deep Learning Side-Channel Collision Attack","volume":"2023","author":"Marvin Staib","year":"2023","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref3:DBLP:conf\/ndss\/BhasinCHJPS20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24390","article-title":"Mind the Portability: A Warriors Guide through Realistic\n  Profiled Side-channel Analysis","author":"Shivam Bhasin","year":"2020"},{"key":"ref4:DBLP:conf\/ches\/ChariRR02","series-title":"Lecture Notes in Computer Science","isbn-type":"print","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1007\/3-540-36400-5_3","article-title":"Template Attacks","volume":"2523","author":"Suresh Chari","year":"2002","ISBN":"https:\/\/id.crossref.org\/isbn\/3540004092"},{"key":"ref5:Schindler2005","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1007\/11545262_3","article-title":"A Stochastic Model for Differential Side Channel\n  Cryptanalysis","author":"Werner Schindler","year":"2005"},{"key":"ref6:DBLP:journals\/jce\/HospodarGMVV11","doi-asserted-by":"publisher","first-page":"293","DOI":"10.1007\/s13389-011-0023-x","article-title":"Machine learning in side-channel analysis: a first study","volume":"1","author":"Gabriel Hospodar","year":"2011","journal-title":"J. Cryptogr. Eng."},{"key":"ref7:maghrebi2016breaking","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-319-49445-6_1","article-title":"Breaking cryptographic implementations using deep learning\n  techniques","author":"Houssem Maghrebi","year":"2016"},{"key":"ref8:PicekHJLGJM17","doi-asserted-by":"publisher","first-page":"4095","DOI":"10.1109\/ijcnn.2017.7966373","article-title":"Side-channel analysis and machine learning: A practical\n  perspective","author":"Stjepan Picek","year":"2017"},{"key":"ref9:Kocher_SCA","series-title":"CRYPTO '99","isbn-type":"print","first-page":"388","article-title":"Differential Power Analysis","author":"Paul C. Kocher","year":"1999","ISBN":"https:\/\/id.crossref.org\/isbn\/3540663479"},{"key":"ref10:mangard2008power","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-38162-6","volume-title":"Power analysis attacks: Revealing the secrets of smart\n  cards","volume":"31","author":"Stefan Mangard","year":"2008"},{"key":"ref11:brier2004correlation","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1007\/978-3-540-28632-5_2","article-title":"Correlation power analysis with a leakage model","author":"Eric Brier","year":"2004"},{"key":"ref12:timon2019non","doi-asserted-by":"publisher","first-page":"107","DOI":"10.46586\/tches.v2019.i2.107-131","article-title":"Non-profiled deep learning-based side-channel attacks with\n  sensitivity analysis","author":"Benjamin Timon","year":"2019","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref13:mor_sca_2022","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1109\/ATC55345.2022.9943024","article-title":"MO-DLSCA: Deep Learning Based Non-profiled Side Channel\n  Analysis Using Multi-output Neural Networks","author":"Ngoc-Tuan Do","year":"2022"},{"key":"ref14:bogdanov2007improved","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1007\/978-3-540-77360-3_6","article-title":"Improved side-channel collision attacks on AES","author":"Andrey Bogdanov","year":"2007"},{"key":"ref15:LL:CARDIS13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-14123-7_5","article-title":"A Machine Learning Approach Against a Masked AES","author":"Liran Lerman","year":"2013"},{"key":"ref16:lu2021pay","doi-asserted-by":"publisher","first-page":"235","DOI":"10.46586\/tches.v2021.i3.235-274","article-title":"Pay attention to raw traces: A deep learning architecture\n  for end-to-end profiling attacks","author":"Xiangjun Lu","year":"2021","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref17:wu2022best","doi-asserted-by":"publisher","first-page":"413","DOI":"10.46586\/tches.v2022.i3.413-437","article-title":"The best of two worlds: Deep learning-assisted template\n  attack","author":"Lichao Wu","year":"2022","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref18:Perin_Wu_Picek_2022","doi-asserted-by":"publisher","first-page":"828","DOI":"10.46586\/tches.v2022.i4.828-861","article-title":"Exploring Feature Selection Scenarios for Deep\n  Learning-based Side-channel Analysis","volume":"2022","author":"Guilherme Perin","year":"2022","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref19:picek2023sok","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3569577","article-title":"Sok: Deep learning-based physical side-channel analysis","volume":"55","author":"Stjepan Picek","year":"2023","journal-title":"ACM Computing Surveys"},{"key":"ref20:DBLP:conf\/crypto\/KocherJJ99","series-title":"Lecture Notes in Computer Science","isbn-type":"print","doi-asserted-by":"publisher","first-page":"388","DOI":"10.1007\/3-540-48405-1_25","article-title":"Differential Power Analysis","volume":"1666","author":"Paul C. Kocher","year":"1999","ISBN":"https:\/\/id.crossref.org\/isbn\/3540663479"},{"key":"ref21:9915370","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/LES.2022.3213443","article-title":"Efficient Non-profiled Side Channel Attack Using\n  Multi-output Classification Neural Network","author":"Van-Phuc Hoang","year":"2022","journal-title":"IEEE Embedded Systems Letters"},{"key":"ref22:moradi2010correlation","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1007\/978-3-642-15031-9_9","article-title":"Correlation-enhanced power analysis collision attack","author":"Amir Moradi","year":"2010"},{"key":"ref23:moradi2016moments","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1145\/2996366.2996369","article-title":"Moments-correlating DPA","author":"Amir Moradi","year":"2016"},{"key":"ref24:wu2023not","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1007\/978-3-031-53368-6_5","article-title":"Not so Difficult in the End: Breaking the Lookup Table-Based\n  Affine Masking Scheme","author":"Lichao Wu","year":"2023"},{"key":"ref25:Zaid_Bossuet_Habrard_Venelli_2019","doi-asserted-by":"publisher","first-page":"1","DOI":"10.13154\/tches.v2020.i1.1-36","article-title":"Methodology for Efficient CNN Architectures in Profiling\n  Attacks","volume":"2020","author":"Gabriel Zaid","year":"2019","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref26:van2011improving","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1007\/978-3-642-19074-2_8","article-title":"Improving differential power analysis by elastic alignment","author":"Jasper GJ van Woudenberg","year":"2011"},{"key":"ref27:hoang2020plaintext","doi-asserted-by":"publisher","first-page":"49","DOI":"10.46586\/tches.v2020.i4.49-85","article-title":"Plaintext: A missing feature for enhancing the power of deep\n  learning in side-channel analysis? breaking multiple layers of side-channel\n  countermeasures","author":"Anh-Tuan Hoang","year":"2020","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref28:hettwer2018profiled","doi-asserted-by":"publisher","first-page":"479","DOI":"10.1007\/978-3-030-10970-7_22","article-title":"Profiled power analysis attacks using convolutional neural\n  networks with domain knowledge","author":"Benjamin Hettwer","year":"2018"},{"key":"ref29:hauke2011comparison","doi-asserted-by":"publisher","first-page":"87","DOI":"10.21203\/rs.3.rs-4380975\/v1","article-title":"Comparison of values of Pearson's and Spearman's correlation\n  coefficients on the same sets of data","volume":"30","author":"Jan Hauke","year":"2011","journal-title":"Quaestiones geographicae"},{"key":"ref30:gerard2012unified","doi-asserted-by":"publisher","first-page":"175","DOI":"10.1007\/978-3-642-33027-8_11","article-title":"Unified and optimized linear collision attacks and their\n  application in a non-profiled setting","author":"Beno\u00eet G\u00e9rard","year":"2012"},{"key":"ref31:caruana1997multitask","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/978-1-4615-5529-2_5","article-title":"Multitask learning","volume":"28","author":"Rich Caruana","year":"1997","journal-title":"Machine learning"},{"key":"ref32:ruder2017overview","article-title":"An overview of multi-task learning in deep neural networks","author":"Sebastian Ruder","year":"2017","journal-title":"arXiv preprint arXiv:1706.05098"},{"key":"ref33:zhang2021survey","doi-asserted-by":"publisher","first-page":"5586","DOI":"10.1109\/TKDE.2021.3070203","article-title":"A survey on multi-task learning","volume":"34","author":"Yu Zhang","year":"2021","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"ref34:maghrebi2020deep","article-title":"Deep learning based side-channel attack: a new profiling\n  methodology based on multi-label classification","author":"Houssem Maghrebi","year":"2020","journal-title":"Cryptology ePrint Archive"},{"key":"ref35:masure2023side","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s13389-023-00311-7","article-title":"Side-channel analysis against ANSSI\u2019s protected AES\n  implementation on ARM: end-to-end attacks with multi-task learning","author":"Lo\u00efc Masure","year":"2023","journal-title":"Journal of Cryptographic Engineering"},{"key":"ref36:klambauer2017self","first-page":"971","article-title":"Self-normalizing neural networks","volume-title":"Advances in Neural Information Processing Systems","author":"G\u00fcnter Klambauer","year":"2017"},{"key":"ref37:bridle1990probabilistic","doi-asserted-by":"publisher","first-page":"227","DOI":"10.1007\/978-3-642-76153-9_28","article-title":"Probabilistic interpretation of feedforward classification\n  network outputs, with relationships to statistical pattern recognition","author":"John S Bridle","year":"1990"},{"key":"ref38:wu2022evaluation","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1007\/978-3-030-99766-3_3","article-title":"On the evaluation of deep learning-based side-channel\n  analysis","author":"Lichao Wu","year":"2022"},{"key":"ref39:DBLP:journals\/jce\/BenadjilaPSCD20","doi-asserted-by":"publisher","first-page":"163","DOI":"10.1007\/s13389-019-00220-8","article-title":"Deep learning for side-channel analysis and introduction to\n  ASCAD database","volume":"10","author":"Ryad Benadjila","year":"2020","journal-title":"J. Cryptographic Engineering"},{"key":"ref40:wu2023hiding","article-title":"Weakly Profiling Side-channel Analysis","author":"Lichao Wu","year":"2024","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref41:bronchain2020side","doi-asserted-by":"publisher","first-page":"1","DOI":"10.46586\/tches.v2020.i2.1-25","article-title":"Side-channel countermeasures\u2019 dissection and the limits of\n  closed source security evaluations","author":"Olivier Bronchain","year":"2020","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded\n  Systems"},{"key":"ref42:bevan2002ways","doi-asserted-by":"publisher","first-page":"327","DOI":"10.1007\/3-540-36552-4_23","article-title":"Ways to enhance differential power analysis","author":"R\u00e9gis Bevan","year":"2002"},{"key":"ref43:wu2023label","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2023.3287728","article-title":"Label Correlation in Deep Learning-based Side-channel\n  Analysis","author":"Lichao Wu","year":"2023","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"ref44:DBLP:conf\/ches\/2002","series-title":"Lecture Notes in Computer Science","isbn-type":"print","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36400-5","volume-title":"Cryptographic Hardware and Embedded Systems - CHES 2002,\n  4th International Workshop, Redwood Shores, CA, USA, August 13-15, 2002,\n  Revised Papers","volume":"2523","year":"2003","ISBN":"https:\/\/id.crossref.org\/isbn\/3540004092"},{"key":"ref45:DBLP:conf\/crypto\/1999","series-title":"Lecture Notes in Computer Science","isbn-type":"print","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48405-1","volume-title":"Advances in Cryptology - CRYPTO '99, 19th Annual\n  International Cryptology Conference, Santa Barbara, California, USA, August\n  15-19, 1999, Proceedings","volume":"1666","year":"1999","ISBN":"https:\/\/id.crossref.org\/isbn\/3540663479"}],"container-title":["IACR Communications in Cryptology"],"original-title":[],"language":"en","deposited":{"date-parts":[[2024,12,10]],"date-time":"2024-12-10T21:28:21Z","timestamp":1733866101000},"score":1,"resource":{"primary":{"URL":"https:\/\/cic.iacr.org\/p\/1\/3\/20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,7]]},"references-count":45,"URL":"https:\/\/doi.org\/10.62056\/a36cy7qiu","archive":["Internet Archive","Internet Archive"],"relation":{},"ISSN":["3006-5496"],"issn-type":[{"value":"3006-5496","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10,7]]},"assertion":[{"value":"2024-07-07","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-09-02","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"cc1-3-62"}}