Skip to content

Back to the catalog

IISFA: Ineffective Instruction-Skip Fault Attacks on Bitslice Implementations
eprint.iacr.orgpaper

IISFA: Ineffective Instruction-Skip Fault Attacks on Bitslice Implementations

IISFA (Ineffective Instruction-Skip Fault Attack) targets bitsliced block cipher implementations protected by redundancy countermeasures. Skipping one bitslice instruction leaves the result unchanged only when all m S-box inputs fall in an ineffective set, so each released ciphertext restricts all m subkeys. The authors give known- and chosen-plaintext key-recovery procedures and expected injection counts, and recover keys in every trial on GIFT, SKINNY and PIPO implementations on an 8-bit AVR microcontroller using clock glitches.

TL;DR Presents a clock-glitch instruction-skip attack that exploits ineffective faults to recover keys from redundancy-protected bitsliced GIFT, SKINNY and PIPO on AVR.
Open original ↗

Organisations named here

  • clock glitch
  • IISFA
  • ineffective fault analysis
  • instruction skip
  • PIPO
  • SKINNY
  • statistical ineffective fault attack

Technologies named here

  • Clock glitches
  • GIFT
  • AVR

Techniques named here

  • Differential fault analysis
  • Clock glitch fault injection

Related in Hardware & RF