Smart Card Security: Power Analysis Attacks

1
Smart Card Security Power Analysis Attacks

• Greg Kish
• Rob Rex
• Jamie Walls

2
Overview

• Introduction
• Background
• What is a Smart Card
• Evolution
• Attacks
• Power Analysis
• Conclusion

3
Background

• What is a smart card?
• vs. dumb cards
• Why smart cards?
• Applications
• Physical Characteristics
• At a glance
• ISO 7816-21988

4
Evolution

• Embossed numbers and cardholders name
• Signature field
• Magnetic stripe
• Hologram
• Internet fraud
• Smart card

5
Attacks

• Invasive
• Physically breaking the card
• Non-Invasive
• Glitching
• Malicious applets
• Power analysis

6
Simple Power Analysis

• Gathering the data
• How?
• What does it mean?
• Hamming weight leakage
• Transition count
• Breaking DES

7
(No Transcript)
8
Simple Power Analysis

• Gathering the data
• How?
• What does it mean?
• Hamming weight leakage
• Transition count
• Breaking DES

9
Differential Power Analysis

• Why not keep it simple?
• How its done
• Attack in pieces
• Only 26 choices per Sbox

10
(No Transcript)
11
Noise

• Noise
• 4 types of noise
• External
• Intrinsic
• Quantizational
• Algorithmic

12
Defenses

• Ineffective
• Add Noise
• Change execution order
• Promising advances
• Random calculations
• Hardware research

13
Conclusion

• This is important!
• Smart cards are convenient powerful
• Limited by their safety
• Power Analysis
• Information can only be hidden