156
A. P. Fournaris et al.
Recently, in an effort to provide a cheap SCA setup, the ChipWhisperer
project [450] managed to provide a diverse tool-chain for embedded hardware
security research. The ChipWhisperer featuring a CW1173-Lite board is suitable
for capturing traces and attacking software cryptographic algorithms implemented
in its Atmel XMEGA microcontroller, and it was recently upgraded to the CW1200Pro version that offers additional ease-of-use on the process. ChipWhisperer though
also provides the CW305-Artix FPGA board that specifically targets attacks on
hardware cryptographic algorithms implemented in its ARTIX 7 FPGA as well as
the OpenADC dongle that enables trace capturing directly from hardware devices
(without the need for an oscilloscope). Both CW1173 and CW305 allow the
modification of Victim’s Chip frequency (e.g., the frequency range for the CW305Artix board starts from 5 MHz and goes up to 160 MHz due to the onboard PLL
(Phase Locked Loop)). The communication between the user and the Victim Chip
in both boards relies on a software control loop called Chipwhipserer-Capture. This
is a PC-based loop responsible for sending the appropriate data and commands to
the Victim board. In the case of the CW305-Artix FPGA board the PC software
loop is assisted by an onboard AVR microprocessor (partially acting as a control
component).
Complete measurement and evaluation setups are provided by experienced
security test laboratories with longtime presence in the hardware security community. BrightSight delivers the Sideways acquisition center. CRI-Rambus offers
the DPA Workstation [495] which is a complete platform that enables the testing
and analyzing of cryptographic chips and systems vulnerabilities, to power and
electromagnetic (EM) side-channel attacks. Finally, Riscure launched the Inspector [501] which is an integrated test tool for side channel analysis and fault
injection attacks on security devices. The above commercial setups offer SCA
resistance evaluation/assessment on individual security/cryptography hardware and
software implementations as well as on fully working DUT ubiquitous devices (e.g.,
embedded systems).
The gap between the measurement boards and the complete evaluation setups is
huge when it comes to cost. Trace collection and SCA evaluation setups providing
a complete package that includes measurement collection, side-channel attacks
and DUT security analysis, have a considerable cost. On the other side, the cost
of the measurement boards is much more affordable, nonetheless exploiting their
capabilities to the full extent is not always supported by their manufacturers in terms
of software or hardware tools.
9.3.1 Proposing a Fast Trace Collection Approach Beyond
the Traditional Model
As the need for a huge number of traces for SCA evaluation and leakage assessment
becomes considerable (in the presence of DUT with SCA countermeasures) the
A. P. Fournaris et al.
Recently, in an effort to provide a cheap SCA setup, the ChipWhisperer
project [450] managed to provide a diverse tool-chain for embedded hardware
security research. The ChipWhisperer featuring a CW1173-Lite board is suitable
for capturing traces and attacking software cryptographic algorithms implemented
in its Atmel XMEGA microcontroller, and it was recently upgraded to the CW1200Pro version that offers additional ease-of-use on the process. ChipWhisperer though
also provides the CW305-Artix FPGA board that specifically targets attacks on
hardware cryptographic algorithms implemented in its ARTIX 7 FPGA as well as
the OpenADC dongle that enables trace capturing directly from hardware devices
(without the need for an oscilloscope). Both CW1173 and CW305 allow the
modification of Victim’s Chip frequency (e.g., the frequency range for the CW305Artix board starts from 5 MHz and goes up to 160 MHz due to the onboard PLL
(Phase Locked Loop)). The communication between the user and the Victim Chip
in both boards relies on a software control loop called Chipwhipserer-Capture. This
is a PC-based loop responsible for sending the appropriate data and commands to
the Victim board. In the case of the CW305-Artix FPGA board the PC software
loop is assisted by an onboard AVR microprocessor (partially acting as a control
component).
Complete measurement and evaluation setups are provided by experienced
security test laboratories with longtime presence in the hardware security community. BrightSight delivers the Sideways acquisition center. CRI-Rambus offers
the DPA Workstation [495] which is a complete platform that enables the testing
and analyzing of cryptographic chips and systems vulnerabilities, to power and
electromagnetic (EM) side-channel attacks. Finally, Riscure launched the Inspector [501] which is an integrated test tool for side channel analysis and fault
injection attacks on security devices. The above commercial setups offer SCA
resistance evaluation/assessment on individual security/cryptography hardware and
software implementations as well as on fully working DUT ubiquitous devices (e.g.,
embedded systems).
The gap between the measurement boards and the complete evaluation setups is
huge when it comes to cost. Trace collection and SCA evaluation setups providing
a complete package that includes measurement collection, side-channel attacks
and DUT security analysis, have a considerable cost. On the other side, the cost
of the measurement boards is much more affordable, nonetheless exploiting their
capabilities to the full extent is not always supported by their manufacturers in terms
of software or hardware tools.
9.3.1 Proposing a Fast Trace Collection Approach Beyond
the Traditional Model
As the need for a huge number of traces for SCA evaluation and leakage assessment
becomes considerable (in the presence of DUT with SCA countermeasures) the