Improvement in Resilience of AES Design With Reconfigured CFB Mode Against Power Attacks

• Published in: IEEE transactions on very large scale integration (VLSI) systems 2024-11, Vol.32 (11), p.2149-2153
• Main Authors: Singha, Thockchom Birjit, Sanjana, Basa, Ignatius, Titu Mary, Palathinkal, Roy Paily, Ahamed, Shaik Rafi
• Format: Article
• Language: English
• Subjects: Advanced encryption standard (AES); Ciphers; ciphertext; Computer architecture; Internet of Things (IoT); Measurement; measurements to disclose (MTDs); modes of operation; mutual information (MI); plaintext; power analysis attacks (PAAs); Security; Signal to noise ratio; signal-to-noise ratio (SNR); test vector leakage assessment (TVLA); Very large scale integration; VLSI
• ISSN: 1063-8210; 1557-9999
• DOI: 10.1109/TVLSI.2024.3422501

Advanced encryption standard (AES) is used to secure the communication process on the Internet-of-Things (IoT) hardware. It is implementable in various 128-bit modes, such as electronic code book (ECB), cipher block chaining (CBC), cipher feedback (CFB), output feedback (OFB), and counter (CTR), to facilitate parallel processing of data. The noninvasive nature of power analysis attacks (PAAs) to retrieve secret information off a physical device renders such hardware to be unsafe from the adversaries. Also, the assessment of the aforementioned modes for security remains obscured, which is undertaken by this work as a novel attempt. In addition, this work proposes a novel 64-bit version of CFB mode, which provides the highest security with respect to other modes and several unprotected AES designs. PAAs are performed on ASIC platform utilizing UMC 65-nm technology node and a hardware experimental setup using side-channel attack security evaluation board (SASEBO), both at 16-MHz AES frequency and traces sampled at the rate of 1 GSa/s. The measurements to disclose (MTDs) of >1 000 000 provided by the proposed CFB-64 are significantly more than that provided by usual unprotected AES designs. It also offers the highest MTD, and least signal-to-noise ratio (SNR) and mutual information (MI) among other modes, indicating the highest security. The proposed CFB-64 acts as a countermeasure upon integration with an unprotected AES.