Praktikum Seitenkanalangriffe auf IT-Systeme

(4 SWS, 6 CP)

This course is taught by Michael Kasper (Fraunhofer SIT) and Marc Stöttinger.

Administrative contact: Andrea Püchner.

Summer 2011

Date / Schedule:

06.06.2011 – 07.06.2011   14.00 – 16.00 Uhr          - Messungen / Datenakquise

14.06.2011 – 15.06.2011   14.00 – 16.00 Uhr          - Analyse/Angriffsverfahren

21.06.2011 – 22.06.2011   14.00 – 16.00 Uhr          - Evaluation und Sicherheitsabschätzung

28.06.2011 – 29.06.2011   14.00 – 16.00 Uhr          - Gegenmaßnahmen und Härtung

Location:

CASED Building S4|14, room 3.1.17 and 3.1.18 (SCALAB)

Goal

Combination of theoretical and practical aspects of side channel analysis and secure design techniques. Hands-on Side Channel Attacks on Block Ciphers.

Content

- Introduction on side channel analysis as a security threat  

- Primer on side channel testing techniques and experimental setups

- Performing advanced methods for Power- and EM-Analysis (DPA/CPA and Stochastic Methods)

- Security Engineering and Side Channel Evaluation within the design- and development process

- Countermeasures and hardening techniques

Each block begins with an introduction to the theoretical background, which is required for the specific block.  We also give background information and a guided hands-on session. Based on this fundament the students will be motivated to solve specific tasks in groups and/or individual work. This includes both, the laboratory exercises and required preparation for the presence dates.

Depending on the prior knowledge and interests of participants, we will make a suitable weighting and orientation of a laboratory course.

Course Material

Tba.

Prerequisites and related courses @TUD

 - Basics of cryptography

- Basics of IT-Security

- TGdI

- CMS

Students must have a basic understanding of security and cryptography.  We will use  the Advanced Encryption Standard (AES) block cipher for our experiments. Thus, knowledge of there internal structure of the AES would be a good plus. A basic conceptual understanding of side channel analysis is recommended, but not required.

In cooperation with the Department of Mathematics, we support a course "side-channel attacks against IT systems", which is also accepted by FB20. The course gives insights into Side Channel Analysis in general and a deep background of mathematical and theoretical aspects of this topic. But please note, that the participation of this course is not a necessary prerequisite for registration for the laboratory course.

More information can be found under the  TUCAN-04 Event ID 00-0218 vu, a substantial script [2] is also available on request (michael.kasper(a-t)sit.fraunhofer.de).  

Recommended Literature

[1] S. Mangard, E. Oswald, T. Popp: Power Analysis Attacks - Revealing the Secrets of Smart Cards.Springer, Berlin 200cas

[2] W. Schindler, M. Kasper: Seitenkanalangriffe und Fault-Attacken gegen IT-Systeme, Vorlesungsskript, SS2010, TU Darmstadt, 2010

[3] A.J. Menezes, P.C. van Oorschot, S.C. Vanstone: Handbook of Applied Cryptography. CRC Press,Boca Raton 1997.

[4] C. K. Koc: Cryptographic Engineering, Springer, Berlin 2009.

[5] R. Anderson: Security Engineering: A Guide to Building Dependable Distributed Systems, Wiley, 2008.

[6] C. Paar, J. Pelzl: Understanding Cryptography, Springer, Berlin 2009.

[7] J. Buchmann: Einführung in die Kryptographie, Springer, Berlin 2003.

Externe Links

*  Side Channel Attacks Database, Reliable Computing Laboratory, Boston University

*  Side Channel Cryptanalysis Lounge, ECRYPT

*  DPABook.org, Stefan Mangard, Elisabeth Oswald, Thomas Popp

*  OpenSCA, An open source toolbox for Matlab, Elisabeth Oswald, University of Bristol

*  DPA Contest 2010, VLSI research group, TELECOM ParisTech

*  Side-channel Attack Standard Evaluation Board (SASEBO), Research Center for Information Security (RCIS), Tokyo, Japan

Contact

Michael  Kasper

Tel: +49-(0)6151-869-60012

eMail: michael.kasper(a-t)sit.fraunhofer.de

Web: cascade.cased.de/people/michael.html

Marc Stöttinger

Tel.: +49 6151 16-70470

eMail: stoettinger@iss.tu-darmstadt.de

Web: www.iss.tu-darmstadt.de/staff/stoettinger/