Which platforms are most vulnerable to Simple Power Analyse Attack

Question

In a "Simple Power Analyse Attack", the difference in power consumption during multiply or square operation is used.

In the RSA decryption process with the "Square and Multiply" algorithm, both square and multiply operations are executed if bit value in key is $1$ and only square operation is executed if bit value in key is $0$. We can observe on the power graph which operations were executed during decryption process. With this kind of graph it is possible to reconstruct the key.

Which platforms are most vulnerable to this kind of attack ?

Answer 1

Power Analysis attacks rely on the attacker being able to analyse the power used by the computing device, so such attacks work best on platforms where the attacker can analyse the power drawn by the device with cycle accuracy. This points at smart cards, which:

• use an external source of power;
• have very little room for some isolation circuitry which would hide the per-cycle power consumption;
• work in a security model where the attacker controls the external environment (contrary to, say, encryption on a server in a remote room);
• run at low clock rates, facilitating analysis;
• run on an external clock, under full control of the attacker, thus again facilitating analysis (the chip will refuse to run if the clock rate is too low or too high, but simply knowing the clock signal makes correlation much easier);
• are economically forced to be cheap, preventing the application of the most effective but expensive tamper resistance countermeasures.

Smart card vendors still do a lot of work on the subject, and modern, FIPS 140-2 level 3 compliant smart cards, are fairly good at defeating simple power analysis. Countermeasures are both algorithmic (e.g. blinding), software (e.g. always computing the multiplication, regardless of whether the key bit is a zero or a one, but only keeping the multiplied or unmultiplied value at the end), and hardware (isolation with some capacitors, internal clock, extra noise-inducing circuits...).