Smart Card Research and Advanced Applications: 12th International Conference, CARDIS 2013, Berlin, Germany, November 27-29, 2013. Revised Selected Papers

271 Pages·2014·21.461 MB·English

by  Aurélien Francillon, Pankaj Rohatgi (eds.)

Aurélien Francillon
Pankaj Rohatgi (Eds.)
9
1
4 Smart Card Research and
8

S
C
Advanced Applications
N
L
12th International Conference, CARDIS 2013
Berlin, Germany, November 27–29, 2013
Revised Selected Papers
123
Lecture Notes in Computer Science 8419
Commenced Publication in 1973
Founding and Former Series Editors:
Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen
Editorial Board
David Hutchison
Lancaster University, Lancaster, UK
Takeo Kanade
Carnegie Mellon University, Pittsburgh, PA, USA
Josef Kittler
University of Surrey, Guildford, UK
Jon M. Kleinberg
Cornell University, Ithaca, NY, USA
Alfred Kobsa
University of California, Irvine, CA, USA
Friedemann Mattern
ETH Zurich, Zürich, Switzerland
John C. Mitchell
Stanford University, Stanford, CA, USA
Moni Naor
Weizmann Institute of Science, Rehovot, Israel
Oscar Nierstrasz
University of Bern, Bern, Switzerland
C. Pandu Rangan
Indian Institute of Technology, Madras, India
Bernhard Steffen
TU Dortmund University, Dortmund, Germany
Demetri Terzopoulos
University of California, Los Angeles, CA, USA
Doug Tygar
University of California, Berkeley, CA, USA
Gerhard Weikum
Max Planck Institute for Informatics, Saarbruecken, Germany
For furthervolumes:
http://www.springer.com/series/7410
Aurélien Francillon Pankaj Rohatgi (Eds.)
•
Smart Card Research
and Advanced Applications
12th International Conference, CARDIS 2013
Berlin, Germany, November 27–29, 2013
Revised Selected Papers
123
Editors
Aurélien Francillon PankajRohatgi
EURECOM CryptographyResearch Inc.
Biot San Francisco, CA
France USA
ISSN 0302-9743 ISSN 1611-3349 (electronic)
ISBN 978-3-319-08301-8 ISBN 978-3-319-08302-5 (eBook)
DOI 10.1007/978-3-319-08302-5
SpringerChamHeidelbergNewYorkDordrechtLondon
LibraryofCongressControlNumber:2014941234
LNCSSublibrary:SL4–SecurityandCryptology
(cid:2)SpringerInternationalPublishingSwitzerland2014
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.Exemptedfromthislegalreservationarebriefexcerptsinconnectionwith
reviewsorscholarlyanalysisormaterialsuppliedspecificallyforthepurposeofbeingenteredandexecuted
onacomputersystem,forexclusiveusebythepurchaserofthework.Duplicationofthispublicationor
partsthereofispermittedonlyundertheprovisionsoftheCopyrightLawofthePublisher’slocation,inits
currentversion,andpermissionforusemustalwaysbeobtainedfromSpringer.Permissionsforusemaybe
obtainedthroughRightsLinkattheCopyrightClearanceCenter.Violationsareliabletoprosecutionunder
therespectiveCopyrightLaw.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Whiletheadviceandinformationinthisbookarebelievedtobetrueandaccurateatthedateofpublication,
neithertheauthorsnortheeditorsnorthepublishercanacceptanylegalresponsibilityforanyerrorsor
omissions that may be made. The publisher makes no warranty, express or implied, with respect to the
materialcontainedherein.
Printedonacid-freepaper
SpringerispartofSpringerScience+BusinessMedia(www.springer.com)
Preface
Theseproceedingscontaintherevisedversionsofthepapersselectedforpresentation
at CARDIS 2013, the 12th Smart Card Research and Advanced Application Con-
ference,organizedbytheChairforSecurityinTelecommunications(SecT),Technical
University of Berlin, and held at the Moevenpick Hotel, Berlin, Germany.
TheCARDISconference,firstheldinLille,France,in1994,willturn20nextyear.
Over these years, as smart cards became a pervasive, foundational technology for
bootstrapping security and trust, CARDIS became the foremost international con-
ference dedicated to research on all aspects of smart cards and their applications,
including hardware design, operating systems, application software, security proto-
cols, as well as physical and system security.
The conference provides an unparalleled forum for researchers from academia,
industry,testinglabs,andgovernmentorganizationstopresentanddiscussexploratory
research and novel advances in this area. Its unique format allows authors to incor-
porate these discussions andfeedback into the final papers thatare published here.
Thisyear,theCARDISProgramCommitteereviewed47submissionsandselected
17 papers for presentation at the conference. Each paper received at least three
reviewsandallsubmissionsbytheProgramCommitteemembersreceivedatleastfive
reviews. This task was performed by the 38 members of the Program Committee
memberswiththehelpof70externalreviewers.Thetechnicalprogramalsofeatured
threeinvitedtalks.Thefirstinvitedspeaker,Prof.SrdjanCapkun,fromETH,Zurich,
presented‘‘SelectedTopicsinWirelessPhysicalLayerSecurity’’.Thesecondinvited
speaker, Dr. Mathias Wagner, Fellow and Chief Security Technologist at NXP
Semiconductors, spoke about ‘‘Security in Industry — When is Good, Good
Enough?’’. The third invited speaker, Mr. Olivier Thomas from Texplained, SARL,
spoke on the topic of ‘‘Adequate Security’’.
CARDIS 2013 owes its success to the hard work and dedication of a number of
people,andwewouldliketousethisopportunitytothankthemfortheirservice.First
andforemost,wewouldliketothankthemembersoftheProgramCommitteeandthe
external reviewers for conducting the task of evaluating and discussing the submis-
sions with professionalism and within a short and abbreviated timeline. We are very
grateful to Jean-Pierre Seifert, the general chair of CARDIS 2013, and his excellent
teamincludingKevinRedon,ClaudiaPetzsch,andJulianeKraemerfortheirflawless
conferencemanagement.WeareespeciallygratefultoKevinRedonformanagingthe
conference website and making our task easier. We thank the CARDIS Steering
Committee for giving us the privilege of serving as program chairs of this premier
conference,andweespeciallythankProf.Jean-JacquesQuisquaterfororganizingand
publicizingthiseventandforhishelpandguidancethroughouttheprocess.Last,not
least, we thank all the authors who submitted papers and all the attendees who con-
tributed to the discussions and made the conference a memorable event.
November 2013 Aurélien Francillon
Pankaj Rohatgi
Organization
CARDIS 2013 was organized by the Chair for Security in Telecommunications
(SecT), Technical University of Berlin.
Executive Committee
Conference General Chair
Jean-Pierre Seifert TU Berlin and Deutsche Telekom Laboratories,
TU Berlin
Conference Program Co-chairs
Aurélien Francillon EURECOM, France
Pankaj Rohatgi Cryptography Research, USA
Conference Publicity Chair
Jean-Jacques Quisquater Université Catholique de Louvain, Belgium
Program Committee
Onur Aciicmez Samsung, USA
N. Asokan University of Helsinki, Finland
Gildas Avoine UCL, Belgium
Guillaume Barbu Oberthur, France
Christophe Clavier University of Limoges, France
Elke De Mulder Cryptography Research, USA
Hermann Drexler Giesecke & Devrient, Germany
Martin Feldhofer NXP, Austria
Nathalie Feyt Thales, France
Berndt Gammel Infineon, Germany
Michael Hauspie LIFL, France
Michael Hutter TU Graz, Austria
Kari Kostiainen ETHZ, Switzerland
Jean-Louis Lanet University of Limoges, France
Cédric Lauradoux Inria, France
Stefan Mangard Infineon Technologies, Germany
David Naccache ENS, France
Svetla Nikova K.U. Leuven, Belgium
Karsten Nohl Security Research Labs, Germany
VIII Organization
David Oswald Ruhr University Bochum, Germany
Elisabeth Oswald University of Bristol, UK
Eric Peeters Texas Instruments, USA
Erik Poll Radboud Universiteit Nijmegen, The Netherlands
Axel Poschmann Nanyang Technological University, Singapore
Bart Preneel K.U. Leuven, Belgium
Emmanuel Prouff ANSSI, France
Matthieu Rivain CryptoExperts, France
Jean-Marc Robert ETS Montreal, Canada
Thomas Roche ANSSI, France
Ahmad-Reza Sadeghi TU Darmstadt, Germany
Jörn-Marc Schmidt TU Graz, Austria
Lex Schoonen Brightsight, The Netherlands
Sergei Skorobogatov Cambridge University, UK
François-Xavier Standaert UCL, Belgium
Frederic Stumpf Escrypt GmbH, Germany
Marc Witteman Riscure, The Netherlands
AdditionalReviewers
Josep Balasch Vincent Grosso Roel Peeters
Lejla Batina Mike Hamburg Thomas Plos
Georg Becker Christian Hanser François Poucheret
Sonia Belaid Annelie Heuser Mathieu Renauld
Begül Bilgin Johann Heyszl Oscar Reparaz
Rafael Boix Carpi Lars Hoffmann Gokay Saldamli
Guillaume Bouffard Dirmanto Jap Falk Schellenberg
Cees Bart Breunesse Eliane Jaulmes Peter Schwabe
Xavier Carpent Timo Kasper Nicolas Sendrier
J.-C. Courrege Thomas Korak Dave Singelée
Rémy Daudigny Pascal Lafourcade Raphael Spreitzer
Fabrizio De Santis Andy Leiserson Pawel Swierczynski
Cécile Delerablée Victor Lomne Hien Thi Thu Truong
François Durvaux Damien Marion Sébastien Valette
Jan-Erik Ekberg Mark Marson Vincent Verneuil
Matthieu Finiasz Marcel Medwed Christian Wachsmann
Wieland Fischer Bernd Meyer Carolyn Whitnall
Laurie Genelle Amir Moradi Antoine Wurcker
Hannes Gross Michael Muehlberghuber
Organization IX
Sponsoring Institutions
NXP
Infineon
Cryptography Research
Oberthur Technologies
Brightsight
Gemalto
Event Support
1a Event Services Gmbh
Telekom Innovation Laboratories
Contents
Security Technologies - Session Chair: Benedikt Gierlichs
Evaluation of ASIC Implementation of Physical Random Number Generators
Using RS Latches. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Hirotaka Kokubo, Dai Yamamoto, Masahiko Takenaka, Kouichi Itoh,
and Naoya Torii
From New Technologies to New Solutions: Exploiting FRAM Memories
to Enhance Physical Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Stéphanie Kerckhof, François-Xavier Standaert, and Eric Peeters
Attacks on Masking - Session Chair: Michael Hutter
Low Entropy Masking Schemes, Revisited . . . . . . . . . . . . . . . . . . . . . . . . 33
Vincent Grosso, François-Xavier Standaert, and Emmanuel Prouff
On the Vulnerability of Low Entropy Masking Schemes. . . . . . . . . . . . . . . 44
Xin Ye and Thomas Eisenbarth
A Machine Learning Approach Against a Masked AES . . . . . . . . . . . . . . . 61
Liran Lerman, Stephane Fernandes Medeiros, Gianluca Bontempi,
and Olivier Markowitch
Side Channel Attacks - Session Chair: François-Xavier Standaert
Clustering Algorithms for Non-profiled Single-Execution Attacks
on Exponentiations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Johann Heyszl, Andreas Ibing, Stefan Mangard, FabrizioDe Santis,
and Georg Sigl
Optimization of Power Analysis Using Neural Network . . . . . . . . . . . . . . . 94
Zdenek Martinasek, Jan Hajny, and Lukas Malina
Time-Frequency Analysis for Second-Order Attacks. . . . . . . . . . . . . . . . . . 108
Pierre Belgarric, Shivam Bhasin, Nicolas Bruneau, Jean-Luc Danger,
Nicolas Debande, Sylvain Guilley, Annelie Heuser, Zakaria Najm,
and Olivier Rioul
Software and Protocol Analysis - Session Chair: Lex Schoonen
Vulnerability Analysis of a Commercial .NET Smart Card . . . . . . . . . . . . . 125
Behrang Fouladi, Konstantinos Markantonakis, and Keith Mayes
XII Contents
Manipulating the Frame Information with an Underflow Attack. . . . . . . . . . 140
Emilie Faugeron
Formal Security Analysis and Improvement of a Hash-Based NFC
M-Coupon Protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
Ali Alshehri and Steve Schneider
Side Channel Countermeasures - Session Chair: Svetla Nikova
Revisiting Atomic Patterns for Scalar Multiplications on Elliptic Curves. . . . 171
Franck Rondepierre
Efficient and First-Order DPA Resistant Implementations of KECCAK . . . . . . 187
Begül Bilgin, Joan Daemen, Ventzislav Nikov, Svetla Nikova,
Vincent Rijmen, and Gilles Van Assche
Practical Analysis of RSA Countermeasures Against Side-Channel
Electromagnetic Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200
Guilherme Perin, Laurent Imbert, Lionel Torres, and Philippe Maurine
Side Channel and Fault Attacks - Session Chair: Berndt Gammel
The Temperature Side Channel and Heating Fault Attacks . . . . . . . . . . . . . 219
Michael Hutter and Jörn-Marc Schmidt
Glitch It If You Can: Parameter Search Strategies for Successful
Fault Injection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236
Rafael Boix Carpi, Stjepan Picek, Lejla Batina, Federico Menarini,
Domagoj Jakobovic, and Marin Golub
Efficient Template Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253
Omar Choudary and Markus G. Kuhn
Author Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271