Successful Attack on an FPGA-based Automatically Placed and Routed WDDL+ Crypto Processor.

Laurent Sauvage (1) , Sylvain Guilley (1) , Jean-Luc Danger (1) , Yves Mathieu (1) , Maxime Nassar (1)

1 LTCI - Laboratoire Traitement et Communication de l'Information

In this paper, we report the first successful attack on a DES crypto co-processor protected by the ``Positive'' Wave Dynamic Differential Logic (WDDL+) and embedded in a Field Programmable Gates Array (FPGA). This attack is unambigous as the full key is retrieved. We experimentally show that this countermeasure resists to Differential Power Analysis (DPA), but can be broken by a totally non-invasive Electro-Magnetic Analysis (EMA) method. The method relies on two stages, the first being a localisation phase by means of cartography, and the second being the EMA attack on the most relevant area.

Mots clés: Field Programmable Gates Array (FPGA); Side-Channel Analysis (SCA); Differential Power Analysis (DPA); Differential Electro-magnetic Analysis (DEMA); Wave Dynamic Differential Logic (WDDL); Field Programmable Gates Array (FPGA).

Domaines: Micro et nanotechnologies/Microélectronique

Laurent Sauvage, Sylvain Guilley, Jean-Luc Danger, Yves Mathieu, Maxime Nassar. Successful Attack on an FPGA-based Automatically Placed and Routed WDDL+ Crypto Processor.. 2008. ⟨hal-00339858⟩