I am looking for help with some issues that I have about the guessing entropy (GE) in side-channel attacks context. I have read some papers where GE is used as a metric to measure the attack's performance. In this paper, they define it like:

enter image description here

The q parameter in the expression represents the number of queries

My interpretation: One experiment is taking a random k from the K set. Then, use the gamma function to associate that k to a specific class. Then, perform the key recovery, and as a result, one gets a vector whose elements are the probability of each class. Finally, the experiment returns the position (index) of the class in the probability vector. So the GE is the mean position of the correct key.

I still have doubts about how to use it in attacks with deep learning. To be more clear: When I have finished training my DL model that has 255 neurons in the output layer (one for each byte, i.e. class, in 255 from 00 to FF). Then, I use the "attack set" to make predictions, and I will get a 255-vector of probabilities, so that is the vector g.

Issue 1: I don't understand how to prepare my attack set, it has to contain random elements with classes from 00 to FF or it has to contain elements from just one class because it is the correct class? But, if the latter is the case how can I choose a random k from K set then?

Issue 2: If I perform 10 experiments with different values of q, this means that I take q=1 elements from my attack set, but it has to be for each class, i.e. q=1 for 00, q=1 for 01... q=1 for FF. Then, repeat for q=2?

Issue 3: When q>1 this means that I have to compute the average of the probability vectors to get one single vector, and then continue the algorithm?

If it's useful, I include this image which is the result of the guessing entropy after experiments with increasing values of q.

enter image description here

Thanks in advance!

  • $\begingroup$ My advice is to ask this at a stats or ML site, the question is sharply focused on statistics/ML technique. The guessing entropy function is just a black box wrt your question. $\endgroup$ – kodlu Dec 31 '19 at 3:54
  • $\begingroup$ Thanks Kodlu, it's a good advice. I thought that this was the correct place since GE is a metric for Side-Channel performance, meaning that GE is not always derivates from ML, but from others optimal strategies not related to it. As an example, template attack which is also a profiling attack: cl.cam.ac.uk/~mgk25/cardis2013-templates.pdf . Indeed is used it in most of the attacks to present their performances. $\endgroup$ – Servio Dec 31 '19 at 11:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.