Smart Card Research and Advanced Applications: 14th International Conference, CARDIS 2015, Bochum, Germany, November 4-6, 2015. Revised Selected Papers

288 Pages·2016·20.288 MB·English

by  Naofumi Homma, Marcel Medwed (eds.)

Naofumi Homma
Marcel Medwed (Eds.)
4
1
5 Smart Card Research
9

S
C
and Advanced Applications
N
L
14th International Conference, CARDIS 2015
Bochum, Germany, November 4–6, 2015
Revised Selected Papers
123
Lecture Notes in Computer Science 9514
Commenced Publication in 1973
Founding and Former Series Editors:
Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen
Editorial Board
David Hutchison
Lancaster University, Lancaster, UK
Takeo Kanade
Carnegie Mellon University, Pittsburgh, PA, USA
Josef Kittler
University of Surrey, Guildford, UK
Jon M. Kleinberg
Cornell University, Ithaca, NY, USA
Friedemann Mattern
ETH Zurich, Zürich, Switzerland
John C. Mitchell
Stanford University, Stanford, CA, USA
Moni Naor
Weizmann Institute of Science, Rehovot, Israel
C. Pandu Rangan
Indian Institute of Technology, Madras, India
Bernhard Steffen
TU Dortmund University, Dortmund, Germany
Demetri Terzopoulos
University of California, Los Angeles, CA, USA
Doug Tygar
University of California, Berkeley, CA, USA
Gerhard Weikum
Max Planck Institute for Informatics, Saarbrücken, Germany
More information about this series at http://www.springer.com/series/7410
Naofumi Homma Marcel Medwed (Eds.)
(cid:129)
Smart Card Research
and Advanced Applications
14th International Conference, CARDIS 2015
–
Bochum, Germany, November 4 6, 2015
Revised Selected Papers
123
Editors
NaofumiHomma Marcel Medwed
Tohoku University NXPSemiconductors
Sendai Gratkorn
Japan Austria
ISSN 0302-9743 ISSN 1611-3349 (electronic)
Lecture Notesin Computer Science
ISBN 978-3-319-31270-5 ISBN978-3-319-31271-2 (eBook)
DOI 10.1007/978-3-319-31271-2
LibraryofCongressControlNumber:2016933118
LNCSSublibrary:SL4–SecurityandCryptology
©SpringerInternationalPublishingSwitzerland2016
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbookare
believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors
give a warranty, express or implied, with respect to the material contained herein or for any errors or
omissionsthatmayhavebeenmade.
Printedonacid-freepaper
ThisSpringerimprintispublishedbySpringerNature
TheregisteredcompanyisSpringerInternationalPublishingAGSwitzerland
Preface
The 14th Smart Card Research and Advanced Application Conference was held in
Bochum,Germany,duringNovember4–6,2015.Theconferencewasorganizedbythe
Horst Görtz Institute for IT-Security (HGI) and held at the Ruhr University Bochum
(RUB).
Since 1994, CARDIS has been the foremost international conference dedicated to
smartcardresearchandapplications.Smartcardsandsecureelementsarethebasisfor
manysecuresystemsandplayadecisiveroleinIDmanagement.Establishedcomputer
science areas such as hardware design, operating systems, system modeling, cryp-
tography, verification, and networking have adapted to this fast growing technology
andinvestigateemergingissuesresultingfromit.Unlikeeventsdevotedtocommercial
and application aspects of smart cards, CARDIS conferences gather researchers and
technologists who focus on all aspects of the design, development, deployment, vali-
dation, and application of smart cards and secure elements in secure platforms or
systems.
CARDIS 2015 received 40 submissions from 18 countries. Each paper was
reviewedbyatleastthreeindependentreviewers.Theselectionof17paperstofillthe
technical program was accomplished based on 158 written reviews. This task was
performed by the29 membersofthe Program Committee with the help of 69 external
reviewers. The technical program also featured two invited talks. The first invited
speaker, Brecht Wyseur, from Nagra, Switzerland, presented “White-Box Cryptogra-
phy and Smart Cards: Friend or Foe?” The second invited speaker, Sebastian Faust,
from Ruhr University Bochum, Germany, gave a talk on “Leakage Resilient Masking
Schemes.”
We would like to thank the Organizing Committee chairs, Tim Güneysu, Amir
Moradi, and Christof Paar, for their excellent conference management. Furthermore,
we would like to thank Aurélien Francillon for his valuable advice and help. We are
alsogratefulfortheexcellentlocalarrangements organizedbyIrmgardKühn.Besides
the organizers of the conference and the venue, we would also like to express our
sincere thanks to the people who enabled the technical program to have such high
quality. These are most prominently the members of the Program Committee and the
externalreviewers,butalsotheinvitedspeakersandtheauthors.Finally,wewouldalso
like to acknowledge the Steering Committee for giving us the privilege of serving as
programchairsofCARDIS2015.Inparticular,wethanktheSteeringCommitteechair,
François-Xavier Standaert, for his help and guidance throughout the process.
November 2015 Naofumi Homma
Marcel Medwed
Organization
CARDIS 2015 was organized by Horst Görtz Institute for IT-Security (HGI) at Ruhr
University Bochum (RUB).
Organizing Committee Chairs
Tim Güneysu University of Bremen, Germany
Amir Moradi Ruhr University Bochum, Germany
Christof Paar Ruhr University Bochum, Germany
Conference Program Co-chairs
Naofumi Homma Tohoku University, Japan
Marcel Medwed NXP Semiconductors, Austria
Program Committee
Guillaume Barbu Oberthur Technologies, France
Guillaume Bouffard ANSSI, France
Kim-Kwang Raymond University of South Australia, Australia
Choo
Christophe Clavier University of Limoges, France
Elke De Mulder Cryptography Research France, France
Thomas Eisenbarth Worcester Polytechnic Institute, USA
Wieland Fischer Infineon Technologies, Germany
Aurelien Francillon EURECOM, France
Benedikt Gierlichs KU Leuven, Belgium
Christophe Giraud Oberthur Technologies, France
Sylvain Guilley Telecom-ParisTech and Secure-IC, France
Tim Güneysu University of Bremen, Germany
Johann Heyszl Fraunhofer AISEC, Germany
Michael Hutter Cryptography Research US, USA
Lanet Jean-Louis University of Limoges, France
Ilya Kizhvatov Riscure, Netherlands
Yuichi Komano Toshiba Corporation, Japan
Victor Lomne ANSSI, France
Stefan Mangard TU Graz, Austria
Amir Moradi Ruhr University Bochum, Germany
Svetla Nikova KU Leuven, Belgium
Elisabeth Oswald University of Bristol, UK
Axel Poschmann NXP Semiconductors GmbH, Germany
Francesco Regazzoni ALaRI - USI, Switzerland
VIII Organization
François-Xavier UCL Crypto Group, Belgium
Standaert
Takeshi Sugawara Mitsubishi Electric Corporation, Japan
Yu Yu Tsinghua University, China
Additional Reviewers
Josep Balasch Yusuke Naito
Valentina Banciu Tsunato Nakai
Georg T. Becker Ventzi Nikov
Molka Ben Romdhane Tsukasa Omino
Shivam Bhasin David Oswald
Begül Bilgin Eric Peeters
Cees-Bart Breunesse Peter Pessl
Samuel Burri Rodrigo Portella do Canto
Cong Chen Guillaume Rambaud
Jean-Michel Cioranesco Pablo Rauzy
Jean-Sebastien Coron David Rennie
Thomas De Cnudde Oscar Reparaz
Kurt Dietrich Sebastien Riou
Quang Do Cyril Roscian
Baris Ege Minoru Saeki
Benoit Gerard Pascal Sasdrich
Gilbert Goodwill Falk Schellenberg
Karin Greimel Martin Schläffer
Vincent Grosso Tobias Schneider
Zheng Guo Dave Singelee
Patrick Haddad Daisuke Suzuki
Helena Handschuh Mostafa Taha
Ray Hunt Philippe Teuwen
Gorka Irazoqui Mike Tunstall
Elif Bilge Kavun Thomas Unterluggauer
François Koeune Jasper van Woudenberg
Thomas Korak Rajesh Velegalati
Julien Lancia Vincent Verneuil
Hélène Le Bouder Weijia Wang
Liran Lerman Mario Werner
Junrong Liu Antoine Wurcker
José Lopes-Esteves Sen Xu
Florian Lugou Tomoko Yonemura
Mark Marson Yu Yu
Steven Murdoch
Organization IX
Sponsoring Institutions
Cryptography in Ubiquitous Computing (UbiCrypt)
European Competence Center for IT Security (eurobits)
Robert Bosch GmbH
Brightsight
Infineon Technologies AG
Contents
Side-Channel Attacks
Side-Channel Attacks on SHA-1-Based Product Authentication ICs. . . . . . . . 3
David Oswald
Enhancing Dimensionality Reduction Methods for Side-Channel Attacks. . . . 15
Eleonora Cagli, Cécile Dumas, and Emmanuel Prouff
A Semi-Parametric Approach for Side-Channel Attacks on Protected RSA
Implementations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Guilherme Perin and Łukasz Chmielewski
Java Cards
seTPM: Towards Flexible Trusted Computing on Mobile Devices Based
on GlobalPlatform Secure Elements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Sergej Proskurin, Michael Weiß, and Georg Sigl
Java Card Virtual Machine Compromising from a Bytecode Verified
Applet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Julien Lancia and Guillaume Bouffard
Misuse of Frame Creation to Exploit Stack Underflow Attacks
on Java Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Benoit Laugier and Tiana Razafindralambo
Evaluation Tools
From Code Review to Fault Injection Attacks: Filling the Gap Using
Fault Model Inference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Louis Dureuil, Marie-Laure Potet, Philippe de Choudens,
Cécile Dumas, and Jessy Clédière
Comparing Approaches to Rank Estimation for Side-Channel Security
Evaluations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Romain Poussier, Vincent Grosso, and François-Xavier Standaert
Collision for Estimating SCA Measurement Quality and Related
Applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
Ibrahima Diop, Mathieu Carbone, Sebastien Ordas, Yanis Linge,
Pierre Yvan Liardet, and Philippe Maurine