Theoretical and Practical Aspects of Mutual Information Based Side Channel Analysis
A large variety of side channel analyses performed on embedded devices involve the linear correlation coefficient as wrong-key distinguisher. This coefficient is actually a sound statistical tool to quantify linear dependencies between univariate variables. However, when those dependencies are non-linear, the correlation coefficient stops being pertinent so that another statistical tool must be investigated. Recent works showed that the Mutual Information measure is a promising candidate, since it detects any kind of statistical dependency. Substituting it for the correlation coefficient may therefore be considered as a natural extension of the existing attacks. Nevertheless, the first applications published at CHES 2008 have revealed several limitations of the approach and have raised several questions. In this paper, an in-depth analysis of side channel attacks involving the mutual information is conducted. We expose their theoretical foundations and we assess their limitations and assets. Also, we generalize them to higher orders where they seem to be an efficient alternative to the existing attacks. Eventually, we provide simulations and practical experiments that validate our theoretical analyses.
KeywordsMutual Information Conditional Entropy Parametric Estimation Method Noise Standard Deviation Histogram Method
Unable to display preview. Download preview PDF.
- 1.Kocher, P., Jaffe, J., Jun, B.: Differential Power Analysis. In: , pp. 388–397Google Scholar
- 5.Aumonier, S.: Generalized Correlation Power Analysis. In: Proceedings of the Ecrypt Workshop Tools For Cryptanalysis 2007 (2007)Google Scholar
- 7.Standaert, F.X., Malkin, T.G., Yung, M.: A Formal Practice-Oriented Model For The Analysis of Side-Channel Attacks. Cryptology ePrint Archive, Report 2006/139 (2006)Google Scholar
- 8.Chari, S., Jutla, C., Rao, J., Rohatgi, P.: Towards Sound Approaches to Counteract Power-Analysis Attacks. In: , pp. 398–412Google Scholar
- 9.Prouff, E., Rivain, M., Bévan, R.: Statistical Analysis of Second Order Differential Power Analysis. IEEE Transactions on Computers (to appear, 2009)Google Scholar
- 11.Turlach, B.A.: Bandwidth selection in kernel density estimation: A review. In: CORE and Institut de Statistique, pp. 23–493 (1993)Google Scholar
- 12.Wand, M.P.: Data-based choice of histogram bin width. The American Statistician 51, 59–64 (1997)Google Scholar
- 14.Wasserman, L.: All of Statistics: A Concise Course in Statistical Inference. Springer Texts in Statistics (2005)Google Scholar
- 16.Gray, A.G., Moore, A.W.: Nonparametric density estimation: Toward computational tractability. In: Proceedings of the Third SIAM International Conference on Data Mining. SIAM, Philadelphia (2003)Google Scholar