Breaking AES with side channel analysis
summary
Demonstrates extracting an AES‑128 key from a 32‑bit embedded CPU by measuring power with a resistor and oscilloscope, using ChipWhisperer hardware and Python to record traces and run correlation power analysis (CPA). Attack models S‑box output via Hamming weight, brute forces each key byte (256 guesses) and picks the byte with maximum Pearson correlation. In a clean lab setup the round key appears after about 35 traces (partial recovery visible around 25); end result: full key recovered and inverted to the input key.
AI-written summary · about
chapters (27)
- 0:00Start
- 0:27Side Channel Analysis
- 3:59Introduction to Side Channel Analysis
- 4:30Examples of Side Channels
- 5:40Timing Side Channel
- 6:40Power Analysis
- 8:02Aas the Ies Crypto Algorithm
- 10:14Block Cipher
- 11:10Symmetric Cipher
- 12:56Key Expansion Function
- 13:59State Matrix
- 15:00Add round Key Function
- 15:40Sub Bytes
- 18:46Correlation Power Analysis
- 21:13Power Consumption
- 22:34Side Channel Analysis of Aes
- 25:37Formula for a Correlation Coefficient
- 30:24Chip Whisperer
- 32:33Compile the Code
- 37:36Known Plain Text
- 38:36Counter Mode and Gcm Mode
- 41:38As256
- 42:53Decryption
- 44:05Side Channel Attacks
- 48:35Random Delays
- 56:02Countermeasures
- 56:44Masking
related talks
19mReality Check on Side-Channels: Lessons learnt from breaking AES on ARM Cortex-A72...
01h 02mCryptographic Side-Channels on Embedded Devices
42mEverything I always wanted to know about crypto
57mUnboxing The White-Box: Practical Attacks Against Obfuscated Ciphers
50mBy-Design Backdooring of Encryption System - Can We Trust Foreign Encryption Algorithms
40mVideo-Based Cryptanalysis: Recovering Cryptographic Keys from Device Using Video of Power LED
42mBreak Crypto like a Pro!
16mPowerHooK: Enabling Software-Based Power Side Channels Against AMD SEV Technologies...