Side-Channel Attack
Definition
Attack that exploits information leaked by a correct implementation: timing, power consumption, electromagnetic emanation, cache state, acoustic noise. Independent of the algebra of the cipher.
- Target
- Information leaked by a correct implementation, not the cipher's algebra
- Common channels
- Timing, power consumption, electromagnetic emanation, cache state, acoustic noise
- Independence
- Works even against a mathematically unbroken algorithm
- Relevance to forensics
- Can recover keys from hardware without breaking the underlying cryptography
Common questions
Why can a side-channel attack succeed against an algorithm with no known mathematical weakness?+
The attack does not try to break the cipher's mathematics at all. It measures how the physical implementation, such as a smartcard or embedded chip, behaves while performing the calculation, and infers secret key bits from patterns in timing, power draw, or emitted signals that correlate with the operations being performed.
What is the practical defence against side-channel attacks?+
Implementations use constant-time code so operations take the same duration regardless of secret data, masking and blinding techniques to decorrelate power consumption from key bits, and physical shielding against electromagnetic and acoustic leakage; none of these change the underlying algorithm, only how it is executed.
Related terms
- Brute Force
- Exhaustive search over the key space. The benchmark every other attack must beat. AES-128 brute force is computationally infeasible on classical hardware;...
- Cryptanalysis
- The study of breaking cryptographic systems. Complement to cryptography. Goals include recovering the key, recovering the plaintext, or distinguishing a cipher's output...
- Diffie-Hellman
- Key exchange protocol by Diffie, Hellman and Merkle (1976) that lets two parties agree on a shared secret over a public channel....
- Padding Oracle
- An attack that uses an error-message distinction (or a timing distinction) between 'padding invalid' and 'authentication invalid' to recover plaintext from CBC-mode...
- Perfect Forward Secrecy (PFS)
- Property of a key exchange where compromise of a long-term private key does not let the attacker decrypt past sessions. Achieved by...
- Post-Quantum Cryptography (PQC)
- Algorithms designed to resist attacks by sufficiently capable quantum computers. NIST standardised CRYSTALS-Kyber as ML-KEM and CRYSTALS-Dilithium as ML-DSA in 2024.