A Journey Towards Side-Channel Attack Resistances (C13a)
Since the end of the 90s, side-channel attacks have gotten more public attention starting with simple and differential power analysis going towards profiled attacks and machine learning in the recent years. In the new version of FIPS 140-3, a new chapter dedicated to non-invasive attacks has been added to cover the growing needs of side-channel attacks in the Industry. In this presentation, we will review different side-channel attacks techniques, what it means from a technical as well as importance from the end-customer perspective. Furthermore, we will take a look at different attacker profiles. Finally, we will analyze the usage of side-channel attacks in security evaluations such as Common Criteria, EMVCo, FIPS, SESIP and others. From there, we will review the key aspects and requirements for a good level of assurance and pitfalls to avoid.