Study of a Parity Check Based Fault-Detection Countermeasure for the AES Key Schedule

Christophe Clavier (1) , Julien Francq (2) , Antoine Wurcker (1)

1 XLIM-DMI - DMI
2 Airbus Defence and Space [Toulouse]

In this paper we study a parity check based countermeasure proposed by Chen et al. that thwarts their attack by detecting byte fault injection during the AES key schedule process. We provide a generalization of their approach that allows to derive parity equations for every AES sizes not given by the authors. We analyze why Chen et al. countermeasure does not properly works. Doing so we are able to extend the coverage of the fault detection to the full expanded key. Finally we suggest optimizations that reduce memory and computation costs, and propose an adaptation to a more general fault model.

Mots clés: side-channel analysis; fault attacks; parity check countermeasure; AES key schedule

Domaines: Cryptographie et sécurité [cs.CR]

Christophe Clavier, Julien Francq, Antoine Wurcker. Study of a Parity Check Based Fault-Detection Countermeasure for the AES Key Schedule. [Research Report] 2015/877, IACR Cryptology ePrint Archive. 2015. ⟨hal-02486939⟩