the anti algebraic side channel attack capability of a masked software DES is evaluated. The algebraic side channel attack principle is studied
and then the Hamming weight information of Sbox output of DES without protection is got based on the template attack
it is as the configurable parameters to generate conjunctive normal form of DES using script language and BAT tools
the key is retrieved by solver finally. The results show that the 56 bit DES root key can be recovered by using the Hamming weight of Sbox output from the middle 3 successive rounds
while the mask is only used to protect the first two rounds and the last two rounds of DES.
M RENAULD, F.-X STANDAERT, N VEYRAT-CHARVILLON. Algebraic Side-Channel Attacks on the AES: Why Time also Matters in DPA[C]. In proceedings of CHES2009, Lecture Notes in Computer Science. Lausanne, 2009: 97-111.
M RENAULD, F.-X STANDAERT. Algebraic Side-Channel Attacks[C]. In Proceedings of the INSCRYPT 2009, LNCS 6151. Beijing, China, 2009: 393-410.
MN VELEV. Efficient translation of boolean formulas to CNF in formal verification of microprocessors[C]. In Proceedings of the 2004 Asia and South Pacific Design Automation Conference: 310-315.
P MANOLIOS, D VROON. Efficient circuit to CNF conversion[C]. Theory and Application of Satisfiability Testing, SAT 2007: 4-9.
B CHAMBERS, P MANOLIOS, D VROON. Faster SAT solving with better CNF generation[C]. In Proceedings of the Conference on Design, Automation and Test in Europe 2009: 1590-1595.