# Questions tagged [dpa]

A DPA (or differential power analysis) is a cryptanalysis method based on analysis of the correlation between the power consumption of a chip (in a smart card for example) and the secret key it contains during cryptographic computations.

10 questions
76 views

### RSA: Should the generation of random data used for primes include zero

When generating random data that is later tested for primality, should the random data include the value 0x0? I would have thought that primes that do not include zero's are a subset of the set of ...
31 views

### How do we perform second order differential power analysis attack?

I have read papers which describe that the power traces(acquired from a side channel resistant implementation like masking) need to be centered and squared, then a correlation needs to be performed ...
45 views

### Side Channel Analysis (CorrPA), comparison between HW-results and measured power traces

I think I have missed something very fundamental. I am trying to understand the step in DPA where you compare your hypothetical power consumptions with your measured ones. The Matrix H with Matrix T. ...
65 views

### Higher-Order Side Channel Security and Mask Refreshing: linear function?

I currently read about this paper: https://eprint.iacr.org/2015/359.pdf and I wanted to implement Algorithm 4 / Algorithm 5 on my own. There is one thing I cannot understand: where does function g ...
346 views

### Conditions for a successful Differential Power Analysis attack

From this paper, there are two conditions for a successful DPA attack: i) there exists an intermediate variable in the implementation that is correlated with the power consumption and ii) ...
339 views

### How does the split mask countermeasure work on AES?

I am trying to understand the split mask countermeasure which is a masking method to avoid side channel attacks. Let's first describe the principle and then try to apply it to AES. I found this paper ...
873 views

### How does DPA work on AES?

I am really not much of a crypto guy so I don't really get how a differential power analysis on AES works. Can somebody explain it to me how it basically works?
86 views

### Why should the input value on a DPA attack be non-constant?

I actually was wondering if anyone could help me out with the following problem: Let's assume we are attacking the first SubBytes() operation on AES with the help ...
I'm trying to understand how a XOR affect traces of power consumption in a Differential Power Analysis on smartcards. What's the difference in energy radiated in a $1 \oplus 1$ and in a $0 \oplus 1$? ...