Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was trying to understand the procedure of the DPA attack on Stream cipher (like Mickey-128).

I learned that, the attacker need to build hypothetical power consumption matrix with different initial vectors. For example: using hamming-distance model to describe the power consumption based on R & S registers. But by doing this, different initial vectors have to be known to the attacker.

So my question is, in real life, how the attacker get these large amount of different initial vectors to build the hypothetical power consumption matrix?

share|improve this question
One possibility would be to obtain some legitimate devices with known test keys (or known test master keys used to set device keys), by social engineering on the tune of that will open a huge market in (remote location). – fgrieu Feb 25 '14 at 8:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.