I am trying to implement an attack on aes using Giraud's attack on the last round of aes using a fault injection of one bytes here is the situation normal byte in the 10th position (1,2) of the 4x4 matrix s[10]= 0xdc => 1101 1100 other corresponding bytes of 3 itérations s^[10]= 0x13 => 0001 0011 s^[Nr] = 0x0e => 0000 1110 , s^[Nr] = 0xe8 => 1110 1000 I tryied several time to implement this algorithm, no result: in this document, giraud's algorithm is explained here page 59-60

  • $\begingroup$ What's your specific question? Where are you stuck? Code requests are certainly off topic here. $\endgroup$ – Maarten Bodewes Dec 29 '20 at 20:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.