Fault Analysis on AES: A Property-Based Verification Perspective

作者：Xiaojie Dai, Xingxin Wang, Xue Qu, Baolei Mao, Wei Hu · 发表于：Tsinghua Science & Technology · 年份：2023 · DOI：10.26599/tst.2023.9010035 · 被引用次数：2 · 研究领域：Security and Verification in Computing、Physical Unclonable Functions (PUFs) and Hardware Security、Cryptographic Implementations and Security

Fault analysis is a frequently used side-channel attack for cryptanalysis. However, existing fault attack methods usually involve complex fault fusion analysis or computation-intensive statistical analysis of massive fault traces. In this work, we take a property-based formal verification approach to fault analysis. We derive fine-grained formal models for automatic fault propagation and fusion, which establish a mathematical foundation for precise measurement and formal reasoning of fault effects. We extract the correlations in fault effects in order to create properties for fault verification. We further propose a method for key recovery, by formally checking when the extracted properties can be satisfied with partial keys as the search variables. Experimental results using both unprotected and masked advanced encryption standard (AES) implementations show that our method has a key search complexity of 216, which only requires two correct and faulty ciphertext pairs to determine the secret key, and does not assume knowledge about fault location or pattern.