This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Workshop on Fault Diagnosis and Tolerance in Cryptography (FDTC 2007)
DFA Mechanism on the AES Key Schedule
Vienna, Austria
September 10-September 10
ISBN: 0-7695-2982-8
Junko Takahashi, NTT Corporation, Japan
Toshinori Fukunaga, NTT Corporation, Japan
Kimihiro Yamakoshi, NTT Corporation, Japan
This paper describes a DFA (Differential Fault Analysis) mechanism on the AES key scheduling process and shows how an entire 128-bit AES key can be retrieved. We make a detailed analysis of the DFA mechanism on the AES key schedule and propose general attack rules. As a result of reconsidering the best attack approach on the basis of analysis, we present a more efficient attack than the previous one. We show that we can retrieve an entire 128-bit AES key using 2-pairs of correct and faulty ciphertexts with a 48-bit brute-force search, 4-pairs of them with a 16-bit brute-force search and 7-pairs of them without brute-force search. These steps are enough to calculate the key with feasible computation resources.
Citation:
Junko Takahashi, Toshinori Fukunaga, Kimihiro Yamakoshi, "DFA Mechanism on the AES Key Schedule," fdtc, pp.62-74, Workshop on Fault Diagnosis and Tolerance in Cryptography (FDTC 2007), 2007
Usage of this product signifies your acceptance of the Terms of Use.