Horizontal Correlation Analysis on Exponentiation - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2010

Horizontal Correlation Analysis on Exponentiation

Christophe Clavier
Benoit Feix
  • Function : Author
  • PersonId : 883791
Georges Gagnerot
  • Function : Author
  • PersonId : 918159
Mylène Roussellet
  • Function : Author
  • PersonId : 883792


We introduce in this paper a technique in which we apply correlation analysis using only one execution power curve during an exponentiation to recover the whole secret exponent manipulated by the chip. As in the Big Mac attack from Walter, longer keys may facilitate this analysis and success will depend on the arithmetic coprocessor characteristics. We present the theory of the attack with some practical successful results on an embedded device and analyze the efficiency of classical countermeasures with respect to our attack. Our technique, which uses a single exponentiation curve, cannot be prevented by exponent blinding. Also, contrarily to the Big Mac attack, it applies even in the case of regular implementations such as the square and multiply always or the Montgomery ladder. We also point out that DSA and Diffie-Hellman exponentiations are no longer immune against CPA. Then we discuss the efficiency of known countermeasures, and we finally present some new ones.
Fichier principal
Vignette du fichier
Horizontal_Correlation_Analysis_on_Exponentiation.pdf (1.03 Mo) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00540384 , version 1 (29-11-2010)




  • HAL Id : inria-00540384 , version 1


Christophe Clavier, Benoit Feix, Georges Gagnerot, Mylène Roussellet, Vincent Verneuil. Horizontal Correlation Analysis on Exponentiation. Twelfth International Conference on Information and Communications Security, Universitat Politècnica de Catalunya, Dec 2010, Barcelona, Spain. ⟨inria-00540384⟩
303 View
471 Download


Gmail Facebook X LinkedIn More