Combining High-Level and Low-Level Approaches to Evaluate Software Implementations Robustness Against Multiple Fault Injection Attacks

Lionel Rivière (1) , Marie-Laure Potet (2) , Thanh-Ha Le (1) , Julien Bringer (1) , Hervé Chabanne (1) , Maxime Puys (1)

1 Morpho
2 VERIMAG - IMAG - VERIMAG

Physical fault injections break security functionalities of algorithms by targeting their implementations. Software techniques strengthen such implementations to enhance their robustness against fault attacks. Exhaustively testing physical fault injections is time consuming and requires complex platforms. Simulation solutions are developed for this specific purpose. We chose two independent tools presented in 2014, the Laser Attack Robustness (Lazart) and the Embedded Fault Simulator (EFS) in order to evaluate software implementations against multiple fault injection attacks. Lazart and the EFS share the common goal that consists in detecting vulnerabilities in the code. However, they operate with different techniques , fault models and abstraction levels. This paper aims at exhibiting specific advantages of both approaches and proposes a combining scheme that emphasizes their complementary nature.

Mots clés: Fault injection; fault simulation; instruction skipping; control flow graph; multiple fault; smartcard; embedded systems; security

Domaines: Cryptographie et sécurité [cs.CR]; Informatique et langage [cs.CL]; Systèmes embarqués

Lionel Rivière, Marie-Laure Potet, Thanh-Ha Le, Julien Bringer, Hervé Chabanne, et al.. Combining High-Level and Low-Level Approaches to Evaluate Software Implementations Robustness Against Multiple Fault Injection Attacks. Foundations and Practice of Security, Nov 2014, Montreal, Canada. ⟨10.1007/978-3-319-17040-4_7⟩. ⟨hal-01229261⟩