Seminar Details
2015-02-24 (14.00) : Leakage Certification and the Perceived Information
At Euler building (A002)
Organized by Mathematical Engineering
Speaker :
Standaert, François-Xavier
Abstract :
Evaluating side-channel attacks and countermeasures requires determining the amount of information leaked by a target device. For this purpose, information extraction procedures published so far essentially combine a "leakage model" with a "distinguisher". Fair evaluations ideally require exploiting a perfect leakage model (i.e. exactly corresponding to the true leakage distribution) with a Bayesian distinguisher. But since such perfect models are generally unknown, density estimation techniques have to be used to approximate the leakage distribution. This raises the fundamental problem that all security evaluations are potentially biased by both estimation and assumption errors. Hence, the best that we can hope is to be aware of these errors. In this talk, I will describe methodological tools to solve this issue. Namely, I will show how sound statistical techniques allow both quantifying the leakage of a chip, and certifying that the amount of information extracted is close to the maximum value that would be obtained with a perfect model. This amounts to showing that the "Perceived Information" that can be extracted by concrete adversaries is close enough to the (standard) Mutual Information metric. While introduced in the context of cryptographic circuits, I will then argue that the Perceived Information (and leakage certification tests) have potential application in other areas (such as in statistical databases).