On the optimality and practicability of mutual information analysis in some scenarios

• Main Authors: Cherisey, Eloi De, Guilley, Sylvain, Heuser, Annelie, Rioul, Olivier
• Other Authors: Département Communications & Electronique (COMELEC), Télécom ParisTech, Secure and Safe Hardware (SSH), Laboratoire Traitement et Communication de l'Information (LTCI), Institut Mines-Télécom Paris (IMT)-Télécom Paris-Institut Mines-Télécom Paris (IMT)-Télécom Paris, Secure-IC S.A.S, Institut Mines-Télécom Paris (IMT), Communications Numériques (COMNUM)
• Format: Conference Object
• Language: English
• Published: HAL CCSD 2016
• Subjects: Side-channel analysis; unprofiled distinguishers; MIA; CPA; LRA; max- imum likelihood; [INFO.INFO-CR]Computer Science [cs]/Cryptography and Security [cs.CR]; [MATH.MATH-IT]Mathematics [math]/Information Theory [math.IT]; [INFO.INFO-DM]Computer Science [cs]/Discrete Mathematics [cs.DM]; [INFO.INFO-HC]Computer Science [cs]/Human-Computer Interaction [cs.HC]; [INFO.INFO-TS]Computer Science [cs]/Signal and Image Processing; [SPI.SIGNAL]Engineering Sciences [physics]/Signal and Image processing; [MATH.MATH-ST]Mathematics [math]/Statistics [math.ST]; [MATH.MATH-PR]Mathematics [math]/Probability [math.PR]; [MATH.MATH-FA]Mathematics [math]/Functional Analysis [math.FA]; [MATH.MATH-CA]Mathematics [math]/Classical Analysis and ODEs [math.CA]; [MATH.MATH-GM]Mathematics [math]/General Mathematics [math.GM]; [INFO.INFO-IT]Computer Science [cs]/Information Theory [cs.IT]; Longyearbyen; Norway; Svalbard
• Online Access: https://telecom-paris.hal.science/hal-02300055; https://telecom-paris.hal.science/hal-02300055/document; https://telecom-paris.hal.science/hal-02300055/file/201607cheriseyguilleyheuserrioul.pdf

International audience The best possible side-channel attack maximizes the success rate and would correspond to a maximum likelihood distinguisher if the leak- age probabilities were totally known or accurately estimated in a profiling phase. When profiling is unavailable, however, it is not clear whether Mutual Information Analysis (MIA), Correlation Power Analysis (CPA), or Linear Regression Analysis (LRA) would be the most successful in a given scenario. In this paper, we show that MIA coincides with the maximum likelihood expression when leakage probabilities are replaced by online estimated prob- abilities.We then exhibit two case-studies where MIA outperforms CPA. One case is when the leakage model is known but the noise is not Gaussian. The second case is when the leakage model is partially unknown and the noise is Gaussian. In the latter scenario MIA is more efficient than LRA of any order.