Compilation of a Countermeasure Against Instruction-Skip Fault Attacks

Thierno Barry (1, 2) , Damien Couroussé (2) , Bruno Robisson (1)

1 SAS-ENSMSE - Département Systèmes et Architectures Sécurisés
2 CEA-TECH-Reg - CEA Tech en régions

Physical attacks especially fault attacks represent one the major threats against embedded systems. In the state of the art, software countermeasures against fault attacks are either applied at the source code level where it will very likely be removed at compilation time, or at assembly level where several transformations need to be performed on the assembly code and lead to significant overheads both in terms of code size and execution time. This paper presents the use of compiler techniques to efficiently automate the application of software countermeasures against instruction-skip fault attacks. We propose a modified LLVM compiler that considers our security objectives throughout the compilation process. Experimental results illustrate the effectiveness of this approach on AES implementations running on an ARM-based microcontroller in terms of security overhead compared to existing solutions.

Mots clés: Fault Attacks; Countermeasures; Compiler; LLVM; AES

Domaines: Informatique [cs]; Génie logiciel [cs.SE]; Cryptographie et sécurité [cs.CR]

Thierno Barry, Damien Couroussé, Bruno Robisson. Compilation of a Countermeasure Against Instruction-Skip Fault Attacks. Workshop on Cryptography and Security in Computing Systems, Jan 2016, vienna, Austria. ⟨10.1145/2858930.2858931⟩. ⟨cea-01296572⟩