Side-Channel Expectation-Maximization Attacks - Equipe Secure and Safe Hardware Access content directly
Journal Articles IACR Transactions on Cryptographic Hardware and Embedded Systems Year : 2022

Side-Channel Expectation-Maximization Attacks


Block ciphers are protected against side-channel attacks by masking. On one hand, when the leakage model is unknown, second-order correlation attacks are typically used. On the other hand, when the leakage model can be profiled, template attacks are prescribed. But what if the profiled model does not exactly match that of the attacked device? One solution consists in regressing on-the-fly the scaling parameters from the model. In this paper, we leverage an Expectation-Maximization (EM) algorithm to implement such an attack. The resulting unprofiled EM attack, termed U-EM, is shown to be both efficient (in terms of number of traces) and effective (computationally speaking). Based on synthetic and real traces, we introduce variants of our U-EM attack to optimize its performance, depending on trade-offs between model complexity and epistemic noise. We show that the approach is flexible, in that it can easily be adapted to refinements such as different points of interest and number of parameters in the leakage model.
Fichier principal
Vignette du fichier
202206beguinotchengguilleyrioul.pdf (1.56 Mo) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03718805 , version 1 (12-08-2022)



Julien Béguinot, Wei Cheng, Sylvain Guilley, Olivier Rioul. Side-Channel Expectation-Maximization Attacks. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022, 2022 (4), pp.774-799. ⟨10.46586/tches.v2022.i4.774-799⟩. ⟨hal-03718805⟩
397 View
142 Download



Gmail Mastodon Facebook X LinkedIn More