Countermeasures Optimization in Multiple Fault-Injection Context

Etienne Boespflug (1) , Cristian Ene (1) , Laurent Mounier (1) , Marie-Laure Potet (1)

1 VERIMAG - IMAG - VERIMAG

Fault attacks consist in changing the program behavior by injecting faults at run-time, either at hardware or at software level. Their goal is to change the correct progress of the algorithm and hence, either to allow gaining some privilege access or to allow retrieving some secret information based on an analysis of the deviation of the corrupted behavior with respect to the original one. Countermeasures have been proposed to protect embedded systems by adding spatial, temporal or information redundancy at hardware or software level. First we define Countermeasures Check Point (CCP) and CCPs-based countermeasures as an important subclass of countermeasures. Then we propose a methodology to generate an optimal protection scheme for CCPs-based countermeasure. Finally we evaluate our work on a benchmark of code examples with respect to several Control Flow Integrity (CFI) oriented existing protection schemes.

Mots clés: multiple fault-injection; code analysis; countermeasure optimization; dynamic-symbolic execution

Domaines: Cryptographie et sécurité [cs.CR]

Etienne Boespflug, Cristian Ene, Laurent Mounier, Marie-Laure Potet. Countermeasures Optimization in Multiple Fault-Injection Context. "Fault Diagnosis and Tolerance in Cryptography" FDTC 2020, Sep 2020, Milan (Virtual Workshop), Italy. ⟨10.1109/FDTC51366.2020.00011⟩. ⟨hal-02951150⟩