🤖 AI Summary
CMOS circuit power consumption exhibits data-dependent leakage, forming a critical vulnerability for power-side-channel attacks (e.g., differential power analysis). Existing countermeasures predominantly model leakage at the byte level, overlooking the decisive impact of single-bit leakage on overall security.
Method: This paper introduces, for the first time, a fine-grained protection mechanism grounded in single-bit leakage modeling. We establish a bit-level leakage model to guide low-level netlist enhancement and implement customized masking and balancing at the gate level specifically targeting single-bit-sensitive paths.
Contribution/Results: Our approach transcends traditional byte-level abstractions by suppressing information leakage at its root under classical leakage assumptions. Experimental evaluation demonstrates that cryptographic implementations protected by our method effectively resist side-channel attacks based on mainstream leakage models—including Hamming weight and Hamming distance—yielding substantial improvements in physical security.
📝 Abstract
The dependence of power-consumption on the processed data is a known vulnerability of CMOS circuits, resulting in side channels which can be exploited by power-based side channel attacks (SCAs). These attacks can extract sensitive information, such as secret keys, from the implementation of cryptographic algorithms. Existing countermeasures against power-based side channel attacks focus on analyzing information leakage at the byte level. However, this approach neglects the impact of individual bits on the overall resistance of a cryptographic implementation. In this work, we present a countermeasure based on single-bit leakage. The results suggest that the proposed countermeasure cannot be broken by attacks using conventional SCA leakage models.