TY - JOUR
T1 - A high-speed AES design resistant to fault injection attacks
AU - Mestiri, Hassen
AU - Kahri, Fatma
AU - Bouallegue, Belgacem
AU - Machhout, Mohsen
N1 - Publisher Copyright:
© 2015 Elsevier B.V. All rights reserved.
PY - 2016/3/1
Y1 - 2016/3/1
N2 - To secure the Advanced Encryption Standard against physical attacks known as fault injection attacks, different countermeasures have been proposed. The AES is used in many embedded systems to provide security. It has become the default choice for security services in numerous applications. However, the natural and malicious injected faults reduce its robustness and may cause private information leakage. In this paper, we study the concurrent fault detection schemes for achieving a reliable AES implementation. We specifically propose a new fault detection scheme based on modification of the AES architecture. For this purpose, the round AES transformation is broken into two parts and a pipeline stage is inserted in between. The proposed scheme is independent of the way the S-Box and the Inv-S-Box are implemented. Hence, it can be used for both the S-Box and the Inv-S-Box using Look-Up Table and those using logic gates based on Galois Fields. Our simulation results show the fault coverage reaches 98.54% for the proposed scheme. Moreover, the proposed and the previously reported fault detection schemes have been implemented on the most recent Xilinx Virtex FPGAs. Their area overhead, the frequency and throughput have been compared and it is shown that the proposed fault detection scheme outperform the previously reported ones.
AB - To secure the Advanced Encryption Standard against physical attacks known as fault injection attacks, different countermeasures have been proposed. The AES is used in many embedded systems to provide security. It has become the default choice for security services in numerous applications. However, the natural and malicious injected faults reduce its robustness and may cause private information leakage. In this paper, we study the concurrent fault detection schemes for achieving a reliable AES implementation. We specifically propose a new fault detection scheme based on modification of the AES architecture. For this purpose, the round AES transformation is broken into two parts and a pipeline stage is inserted in between. The proposed scheme is independent of the way the S-Box and the Inv-S-Box are implemented. Hence, it can be used for both the S-Box and the Inv-S-Box using Look-Up Table and those using logic gates based on Galois Fields. Our simulation results show the fault coverage reaches 98.54% for the proposed scheme. Moreover, the proposed and the previously reported fault detection schemes have been implemented on the most recent Xilinx Virtex FPGAs. Their area overhead, the frequency and throughput have been compared and it is shown that the proposed fault detection scheme outperform the previously reported ones.
KW - Cryptographic
KW - Embedded systems
KW - Fault detection
KW - FPGA implementation
KW - Secure AES algorithm
UR - http://www.scopus.com/inward/record.url?scp=84956581077&partnerID=8YFLogxK
U2 - 10.1016/j.micpro.2015.12.002
DO - 10.1016/j.micpro.2015.12.002
M3 - Article
AN - SCOPUS:84956581077
SN - 0141-9331
VL - 41
SP - 47
EP - 55
JO - Microprocessors and Microsystems
JF - Microprocessors and Microsystems
ER -