A Fault Attack Against the FOX Cipher Family

  • L. Breveglieri
  • I. Koren
  • P. Maistri
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 4236)


Since its first introduction, differential fault analysis has proved to be one of the most effective techniques to break a cipher implementation. In this paper, we apply a fault attack to a generic implementation of the recently introduced FOX family of symmetric block ciphers (also known as Idea Nxt). We show the steps needed to mount an effective attack against FOX-64. Although the basic characteristics of this cipher are similar to those of AES, FOX uses a non-invertible key schedule which makes it necessary to use a different attack plan. We also estimate the number of faulty ciphertexts required to reveal the secret key. Our results can be easily extended to other variations of the cipher that use longer inputs and keys.


Smart Card Block Cipher Advance Encryption Standard Fault Injection Fault Attack 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.


  1. 1.
    Bertoni, G., Breveglieri, L., Koren, I., Maistri, P., Piuri, V.: Error analysis and detection procedures for a hardware implementation of the advanced encryption standard. IEEE Trans. Computers 52(4), 492–505 (2003)CrossRefGoogle Scholar
  2. 2.
    Biham, E., Shamir, A.: Differential Fault Analysis of Secret Key Cryptosystems. Technical Report, Technion - Computer Science Department (1997)Google Scholar
  3. 3.
    Blömer, J., Seifert, J.-P.: Fault Based Cryptanalysis of the Advanced Encryption Standard (AES). In: Wright, R.N. (ed.) FC 2003. LNCS, vol. 2742, pp. 162–181. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  4. 4.
    Boneh, D., DeMillo, R., Lipton, R.: On the Importance of Eliminating Errors in Cryptographic Computations. Journal of Cryptology 14, 101–119 (2001)MATHCrossRefMathSciNetGoogle Scholar
  5. 5.
    Junod, P., Vaudenay, S.: FOX: A New Family of Block Ciphers. In: Handschuh, H., Hasan, M.A. (eds.) SAC 2004. LNCS, vol. 3357, pp. 114–129. Springer, Heidelberg (2004)CrossRefGoogle Scholar
  6. 6.
    Karpovsky, M.G., Kulikowski, K.J., Taubin, A.: Robust protection against fault-injection attacks on smart cards implementing the advanced encryption standard. In: Proceedings 2004 International Conference on Dependable Systems and Networks (DSN 2004), pp. 93–101. IEEE Computer Society Press, Los Alamitos (2004)Google Scholar
  7. 7.
    Karri, R., Wu, K., Mishraand, P., Kim, Y.: Concurrent error detection schemes for fault-based side-channel cryptanalysis of symmetric block ciphers. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems 21(12), 1509–1517 (2002)CrossRefGoogle Scholar
  8. 8.
    Karri, R., Kuznetsov, G., Gössel, M.: Parity-based concurrent error detection in symmetric block ciphers. In: Proceedings 2003 International Test Conference (ITC 2003), pp. 919–926. IEEE Computer Society Press, Los Alamitos (2003)CrossRefGoogle Scholar
  9. 9.
    Piret, G., Quisquater, J.-J.: A Differential Fault Attack Technique against SPN Structures, with Application to the AES and Khazad. In: D.Walter, C., Koç, Ç.K., Paar, C. (eds.) CHES 2003. LNCS, vol. 2779, pp. 77–88. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  10. 10.
    Skorobogatov, S.P., Anderson, R.J.: Optical Fault Induction Attacks. In: Kaliski Jr., B.S., Koç, Ç.K., Paar, C. (eds.) CHES 2002. LNCS, vol. 2523, pp. 2–12. Springer, Heidelberg (2003)CrossRefGoogle Scholar
  11. 11.
    Wu, K., Karri, R.: Idle cycles based concurrent error detection of RC6 encryption. In: Proceedings 16th IEEE International Symposium on Defect and Fault-Tolerance in VLSI Systems (DFT 2001), pp. 200–205. IEEE Computer Society Press, Los Alamitos (2001)CrossRefGoogle Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2006

Authors and Affiliations

  • L. Breveglieri
    • 1
  • I. Koren
    • 2
  • P. Maistri
    • 1
  1. 1.Department of Electronics and Information TechnologyPolitecnico di MilanoMilanoItaly
  2. 2.Department of Electrical and Computer EngineeringUniversity of MassachusettsAmherstUSA

Personalised recommendations