Lab 07 - Correlation Power Analysis

In this lab we'll implement a side-channel attack known as Correlation Power Analysis. You can see some details for how to implement this in the lecture notes here

The principle is quite simple:

  1. Choose your target (generally the S-box output of some block cipher - in our case AES)
  2. Obtain a large number (thousands) of leakage samples for that target, when processing different plaintexts
  3. Choose a suitable leakage model (usually the hamming weight of the target value)
  4. For each possible key candidate (e.g. all values from 0 to 255), compute | Person's correlation coefficient between the leakage model estimate for that key candidate and the leakage traces.
  5. Decide for the key that gives maximum correlation

We'll discuss more in detail at the lab.

In this lab we shall use Matlab or Octave (MATLAB is preferred for speed reasons):

Octave main page Download link for Windows

You might also need these additional packages:

Link for additional packages

Use these files as starting point:

sasc/laboratoare/07.txt · Last modified: 2017/04/11 22:22 by marios.choudary
CC Attribution-Share Alike 3.0 Unported Valid CSS Driven by DokuWiki do yourself a favour and use a real browser - get firefox!! Recent changes RSS feed Valid XHTML 1.0