Same Values Power Analysis Using Special Points on Elliptic Curves

Cedric Murdica (1) , Jean-Luc Danger (1) , Sylvain Guilley (1) , Philippe Hoogvorst (2) , David Naccache (3, 4)

1 Télécom ParisTech
2 LTCI - Laboratoire Traitement et Communication de l'Information
3 CASCADE - Construction and Analysis of Systems for Confidentiality and Authenticity of Data and Entities
4 LIENS - Laboratoire d'informatique de l'école normale supérieure

Elliptic Curve Cryptosystems (ECC) on Smart-Cards can be vulnerable to Side Channel Attacks such as the Simple Power Analysis (SPA) or the Differential Power Analysis (DPA) if they are not carefully implemented. Goubin proposed a variant of the DPA using the point (0, y). This point is randomized neither by projective coordinates nor by isomorphic class. Akishita and Takagi extended this attack by considering not only points with a zero coordinate, but also points containing a zero value on intermediate registers during dou bling and addition formu-as. This attack increases the number of possible special points on elliptic curve that need a particular attention. In this paper, we introduce a new attack based on special points that show up internal collision power analysis. This attack increases more the number of possible special points on elliptic curve that need a particular attention. Like Goubin's attack and Akishita and Takagi's attack, our attack works if a fixed scalar is used and the attacker can chose the base point.

Mots clés: Elliptic Curve Cryptosystem; Differential Power Analysis; Zero Value Point Attack; Collision Power Analysis

Domaines: Réseaux et télécommunications [cs.NI]

Cedric Murdica, Jean-Luc Danger, Sylvain Guilley, Philippe Hoogvorst, David Naccache. Same Values Power Analysis Using Special Points on Elliptic Curves. COSADE 2012 - Third International Workshop Constructive Side-Channel Analysis and Secure Design, May 2012, Darmstadt, Germany. pp.Cédric Murdica, ⟨10.1007/978-3-642-29912-4_14⟩. ⟨hal-00686565⟩