Advertisement
Published in:
2014 | OriginalPaper | Chapter
“Ooh Aah... Just a Little Bit” : A Small Amount of Side Channel Can Go a Long Way
Authors : Naomi Benger, Joop van de Pol, Nigel P. Smart, Yuval Yarom
Published in: Cryptographic Hardware and Embedded Systems – CHES 2014
Publisher: Springer Berlin Heidelberg
Activate our intelligent search to find suitable subject content or patents.
Select sections of text to find matching patents with Artificial Intelligence. powered by
Select sections of text to find additional relevant content using AI-assisted search. powered by
We apply the
Flush+Reload
side-channel attack based on cache hits/misses to extract a small amount of data from OpenSSL ECDSA signature requests. We then apply a “standard” lattice technique to extract the private key, but unlike previous attacks we are able to make use of the side-channel information from almost all of the observed executions. This means we obtain private key recovery by observing a relatively small number of executions, and by expending a relatively small amount of post-processing via lattice reduction. We demonstrate our analysis via experiments using the curve
secp256k1
used in the Bitcoin protocol. In particular we show that with as little as 200 signatures we are able to achieve a reasonable level of success in recovering the secret key for a 256-bit curve. This is significantly better than prior methods of applying lattice reduction techniques to similar side channel information.