Bypassing Parity Protected Cryptography Using Laser Fault Injection in Cyber-Physical System
Title | Bypassing Parity Protected Cryptography Using Laser Fault Injection in Cyber-Physical System |
Publication Type | Conference Paper |
Year of Publication | 2016 |
Authors | He, Wei, Breier, Jakub, Bhasin, Shivam, Chattopadhyay, Anupam |
Conference Name | Proceedings of the 2Nd ACM International Workshop on Cyber-Physical System Security |
Publisher | ACM |
Conference Location | New York, NY, USA |
ISBN Number | 978-1-4503-4288-9 |
Keywords | command injection attacks, composability, concurrency and security, concurrency security, concurrent error detection (CED), controller area network security, cyber-physical system, FPGA, injection, injection attacks, laser fault injection, Lightweight Ciphers, Metrics, parity, pubcrawl, register bit-flip, Resiliency |
Abstract | Lightweight cryptography has been widely utilized in resource constrained embedded devices of Cyber-Physical System (CPS) terminals. The hostile and unattended environment in many scenarios make those endpoints easy to be attacked by hardware based techniques. As a resource-efficient countermeasure against Fault Attacks, parity Concurrent Error Detection (CED) is preferably integrated with security-critical algorithm in CPS terminals. The parity bit changes if an odd number of faults occur during the cipher execution. In this paper, we analyze the effectiveness of fault detection of a parity CED protected cipher (PRESENT) using laser fault injection. The experimental results show that the laser perturbation to encryption can easily flip an even number of data bits, where the faults cannot be detected by parity. Due to the similarity of different parity structures, our attack can bypass almost all parity protections in block ciphers. Some suggestions are given to enhance the security of parity implementations. |
URL | http://doi.acm.org/10.1145/2899015.2899019 |
DOI | 10.1145/2899015.2899019 |
Citation Key | he_bypassing_2016 |
- injection
- Resiliency
- register bit-flip
- pubcrawl
- parity
- Metrics
- Lightweight Ciphers
- laser fault injection
- injection attacks
- command injection attacks
- FPGA
- cyber-physical system
- controller area network security
- concurrent error detection (CED)
- concurrency security
- concurrency and security
- composability