Author : Juliane Krämer
Publisher : Springer
ISBN 13 : 9812877878
Total Pages : 136 pages
Book Rating : 4.8/5 (128 download)
Book Synopsis Why Cryptography Should Not Rely on Physical Attack Complexity by : Juliane Krämer
Download or read book Why Cryptography Should Not Rely on Physical Attack Complexity written by Juliane Krämer and published by Springer. This book was released on 2015-09-05 with total page 136 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book presents two practical physical attacks. It shows how attackers can reveal the secret key of symmetric as well as asymmetric cryptographic algorithms based on these attacks, and presents countermeasures on the software and the hardware level that can help to prevent them in the future. Though their theory has been known for several years now, since neither attack has yet been successfully implemented in practice, they have generally not been considered a serious threat. In short, their physical attack complexity has been overestimated and the implied security threat has been underestimated. First, the book introduces the photonic side channel, which offers not only temporal resolution, but also the highest possible spatial resolution. Due to the high cost of its initial implementation, it has not been taken seriously. The work shows both simple and differential photonic side channel analyses. Then, it presents a fault attack against pairing-based cryptography. Due to the need for at least two independent precise faults in a single pairing computation, it has not been taken seriously either. Based on these two attacks, the book demonstrates that the assessment of physical attack complexity is error-prone, and as such cryptography should not rely on it. Cryptographic technologies have to be protected against all physical attacks, whether they have already been successfully implemented or not. The development of countermeasures does not require the successful execution of an attack but can already be carried out as soon as the principle of a side channel or a fault attack is sufficiently understood.