Contactless Electromagnetic Active Attack on Ring Oscillator Based True Random Number Generator

Pierre Bayon; Lilian Bossuet; Alain Aubert; Viktor Fischer; François Poucheret; Bruno Robisson; Philippe Maurine

doi:10.1007/978-3-642-29912-4_12

Contactless Electromagnetic Active Attack on Ring Oscillator Based True Random Number Generator

Pierre Bayon ¹ Lilian Bossuet ^{1, *} Alain Aubert ¹ Viktor Fischer ¹ François Poucheret ^{2, 3} Bruno Robisson ^{3, 4} Philippe Maurine ⁵

* Auteur correspondant

1 LHC - Laboratoire Hubert Curien [Saint Etienne]

2 LIRMM - Laboratoire d'Informatique de Robotique et de Microélectronique de Montpellier

3 CMP-ENSMSE - Centre Microélectronique de Provence - Site Georges Charpak (CMP-GC)

4 SAS-ENSMSE - Département Systèmes et Architectures Sécurisés

5 SysMIC - Conception et Test de Systèmes MICroélectroniques

LIRMM - Laboratoire d'Informatique de Robotique et de Microélectronique de Montpellier

Abstract : True random number generators (TRNGs) are ubiquitous in data security as one of basic cryptographic primitives. They are primarily used as generators of con fidential keys, to initialize vectors, to pad values, but also as random masks generators in some side channel attacks countermeasures. As such, they must have good statistical properties, be unpredictable and robust against attacks. This paper presents a contactless and local active attack on ring oscillators (ROs) based TRNGs using electromagnetic fields. Experiments show that in a TRNG featuring fifty ROs, the impact of a local electromagnetic emanation on the ROs is so strong, that it is possible to lock them on the injected signal and thus to control the monobit bias of the TRNG output even when low power electromagnetic fields are exploited. These results confi rm practically that the electromagnetic waves used for harmonic signal injection may represent a serious security threat for secure circuits that embed RO-based TRNG.

Keywords : Active attacks EM injections IEMI Ring oscillators TRNGs

Type de document :

Communication dans un congrès

W. Schindler; S. A. Huss. COSADE: Constructive Side-Channel Analysis and Secure Design, May 2012, Darmstadt, Germany. Third International Workshop, COSADE 2012, Darmstadt, Germany, May 3-4, 2012. Proceedings, LNCS (7275), pp.151-166, 2012, Constructive Side-Channel Analysis and Secure Design. 〈10.1007/978-3-642-29912-4_12〉

Domaine :

Informatique [cs] / Systèmes embarqués

Informatique [cs] / Cryptographie et sécurité [cs.CR]

Liste complète des métadonnées

Littérature citée [7 références] Voir Masquer Télécharger

https://hal-ujm.archives-ouvertes.fr/ujm-00699618
Contributeur : Nathalie Bochard <>
Soumis le : lundi 21 mai 2012 - 13:16:49
Dernière modification le : mercredi 25 juillet 2018 - 14:05:31
Document(s) archivé(s) le : jeudi 15 décembre 2016 - 08:42:36

2012_Cosade_Bayon.pdf

Fichiers produits par l'(les) auteur(s)

Pierre Bayon, Lilian Bossuet, Alain Aubert, Viktor Fischer, François Poucheret, et al.. Contactless Electromagnetic Active Attack on Ring Oscillator Based True Random Number Generator. W. Schindler; S. A. Huss. COSADE: Constructive Side-Channel Analysis and Secure Design, May 2012, Darmstadt, Germany. Third International Workshop, COSADE 2012, Darmstadt, Germany, May 3-4, 2012. Proceedings, LNCS (7275), pp.151-166, 2012, Constructive Side-Channel Analysis and Secure Design. 〈10.1007/978-3-642-29912-4_12〉. 〈ujm-00699618〉

Contactless Electromagnetic Active Attack on Ring Oscillator Based True Random Number Generator

Fichier

Identifiants

Collections

Citation

Exporter

Métriques

543

1143

Contact

Contactless Electromagnetic Active Attack on Ring Oscillator Based True Random Number Generator

Fichier

Identifiants

Collections

Citation

Exporter

Partager

Métriques

543

1143

Contact