A First Study of Compressive Sensing for Side-Channel Leakage Sampling

• Published in: IEEE transactions on computer-aided design of integrated circuits and systems Vol. 39; no. 10; pp. 2166 - 2177
• Main Authors: Ou, Changhai, Zhou, Chengju, Lam, Siew-Kei
• Format: Journal Article
• Language: English
• Published: New York IEEE 01-10-2020; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Compressed sensing; Compressive sensing (CS); Computational modeling; Correlation; Cryptography; Leakage; leakage reconstruction; matching pursuit (MP); Matching pursuit algorithms; Oscilloscopes; Power demand; power trace; Sampling; side-channel attack (SCA); Storage capacity; Workstations
• ISSN: 0278-0070; 1937-4151
• DOI: 10.1109/TCAD.2019.2960337

An important prerequisite for side-channel attacks (SCAs) is leakage sampling where the side-channel measurements (i.e., power traces) of the cryptographic device are collected for further analysis. However, as the operating frequency of cryptographic devices continues to increase due to advancing technology, leakage sampling will impose higher requirements on the sampling rate and storage capacity of the sampling equipment. This article undertakes the first study to show that effective leakage sampling can be achieved without relying on sophisticated equipments through compressive sensing (CS). As long as the information is leaked in the low-frequency component, CS can obtain low-dimensional samples by simply projecting the high-dimensional signals onto the observation matrix. The power traces can then be reconstructed in a workstation for further analysis and storage. With this approach, the sampling rate to obtain power traces is no longer limited by the operating frequency of the cryptographic device and the Nyquist sampling theorem. Instead, it depends on the sparsity of the leakage signal. As such, CS can employ a much lower sampling rate and yet obtain equivalent leakage sampling performance, which significantly lowers the requirement of sampling equipments. The feasibility of our approach is verified theoretically and through experiments.