Mutual Information Analysis: How, When and Why? Export

@incollection{veyrat-charvillon09mia, abstract = {The Mutual Information Analysis (MIA) is a generic side-channel distinguisher that has been introduced at CHES 2008. This paper brings three contributions with respect to its applicability to practice. First, we emphasize that the MIA principle can be seen as a toolbox in which different (more or less effective) statistical methods can be plugged in. Doing this, we introduce interesting alternatives to the original proposal. Second, we discuss the contexts in which the MIA can lead to successful key recoveries with lower data complexity than classical attacks such as, e.g. using Pearson's correlation coefficient. We show that such contexts exist in practically meaningful situations and analyze them statistically. Finally, we study the connections and differences between the MIA and a framework for the analysis of side-channel key recovery published at Eurocrypt 2009. We show that the MIA can be used to compare two leaking devices only if the discrete models used by an adversary to mount an attack perfectly correspond to the physical leakages.}, author = {Veyrat-Charvillon, Nicolas and Standaert, Fran\c{c}ois-Xavier}, citeulike-article-id = {5804597}, citeulike-linkout-0 = {http://dx.doi.org/10.1007/978-3-642-04138-9_30}, citeulike-linkout-1 = {http://www.springerlink.com/content/y44wv32468h17352}, doi = {10.1007/978-3-642-04138-9_30}, journal = {Cryptographic Hardware and Embedded Systems - CHES 2009}, keywords = {kungschool}, pages = {429--443}, posted-at = {2009-09-19 05:39:52}, priority = {2}, title = {Mutual Information Analysis: How, When and Why?}, url = {http://dx.doi.org/10.1007/978-3-642-04138-9_30}, year = {2009} }

TY - CHAP ID - veyrat-charvillon09mia L3 - citeulike-article-id:5804597 N2 - The Mutual Information Analysis (MIA) is a generic side-channel distinguisher that has been introduced at CHES 2008. This paper brings three contributions with respect to its applicability to practice. First, we emphasize that the MIA principle can be seen as a toolbox in which different (more or less effective) statistical methods can be plugged in. Doing this, we introduce interesting alternatives to the original proposal. Second, we discuss the contexts in which the MIA can lead to successful key recoveries with lower data complexity than classical attacks such as, e.g. using Pearson’s correlation coefficient. We show that such contexts exist in practically meaningful situations and analyze them statistically. Finally, we study the connections and differences between the MIA and a framework for the analysis of side-channel key recovery published at Eurocrypt 2009. We show that the MIA can be used to compare two leaking devices only if the discrete models used by an adversary to mount an attack perfectly correspond to the physical leakages. JF - Cryptographic Hardware and Embedded Systems - CHES 2009 EP - 443 TI - Mutual Information Analysis: How, When and Why? SP - 429 KW - kungschool AU - Veyrat-Charvillon, Nicolas AU - Standaert, François-Xavier PY - 2009/// UR - http://dx.doi.org/10.1007/978-3-642-04138-9_30 ER -