1. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 1 - DAAD Design and Simulation of Multiplexer Cell Resistant to Side Channel Attacks

2. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 2 - DAAD  Introduction  NSDDL method  MUX2x1 NSDDL cell  Conclusion Content

3. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 3 - DAAD Data protection is very important in everyday life and for that reason cryptography received a significant position. Important information, such as secret keys, can be obtained by observing the power consumption, the electromagnetic radiation, the timing information etc. Common to all these methods is analysis of information that leaks from physically implemented hardware. Introduction

4. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 4 - DAAD Cells resistant to SCA (Side Channel Attacks) are based on the idea that each combination of input signals results in the same power consumption. This is possible when every logic cell has the counterpart that will react complementary. Therefore every cell has two outputs denoted as true and false. The hardware is doubled, but the effect of masking the true function of the cell is gained. NSDDL method

5. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 5 - DAAD NSDDL method is based on the three phase clocking. This is achieved by using a dynamic NOR circuit (DNOR). It is the integral part of the control logic and NSDDL cells. The first phase named pre-charge is aimed to drive all outputs (true and false) of all logic cells go to high logic level. In the second phase, known as evaluation phase true outputs takes desired value and false output takes the complementary value. The third phase is named discharge because all outputs go to the low logic level. NSDDL method Fig. 1. DNOR circuit Fig. 2. Time waveforms of control signals for DNOR cell

6. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 6 - DAAD Block diagram of MUX2x1 NSDDL cell is presented in figure 3. Observing this figure one can see that these blocks have the same structure. It consists of two DNOR cells and one MUX2x1. The number of input and output signals in these blocks is the same but input signals are sorted differently. In the False block, inputs A and B exchange their positions because true and false output signals in evaluation phase must be complementary. That is seen in Table I. MUX2x1 NSDDL cell NSDDL Mux2x1 TrueFalse A/BSelOIMOEVALB/ASelOIMOEVAL 0/0010 (A)1/1101 (A) 0/1010 (A)0/1101 (A) 0/0110 (B)1/0001 (B) 1/1101 (B)0/0010 (B) Fig.3 Block scheme of MUX2x1 NSDDL cell Table I Truth table for NSDDL MUX2x1 cell

7. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 7 - DAAD Comparing IDD waveforms for NSDDL and standard cell, for the same input signals, one can see very clear difference. Supply current of MUX2x1 NSDDL has regular pattern independent on output logic states, contrary than a supply current of standard cell. Fig. 4 Waveforms of characteristic signals in NSDDL and standard MUX2x1 cell Waveforms in figure 4 present in top down direction: excitation voltages A and B (1st and 2nd), Discharge and Pre- charge control signals (3rd and 4th), selection signal (5th), IDD and output voltage of NSDDL cell (6th and 7th), and IDD and output voltage for standard MUX2x1 cell (8th and 9th).

8. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 8 - DAAD To quantify resistivity to SCA we have adopted a measure based on computed integral of consumed pow er in time (energy) according to (1). (1) Energy consumption is observed during one cycle of input signal change. For MUX2x1 NSDDL this cycle lasts for all three operational phases. In order to get better insight into behavior of both cells we derived the following parameters from the simulation results: - maximum energy (E max ), - minimum energy (E min ) - average energy (E av ) - relative difference in respect to E av - standard deviation - Normalized Standard Deviation (NSD) in respect to E a v

9. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 9 - DAAD AB E STD [J]E NSDDL [J] 1↑ -2.57E-13-5.03E-12 ↓1 -5.40E-13-5.18E-12 ↑1 -2.55E-13-5.17E-12 1↓ -4.02E-13-5.01E-12 ↓↑ -7.66E-13-5.10E-12 ↑1 -2.54E-13-5.16E-12 11 3.37E-16-5.05E-12 ↓↓ -6.12E-13-5.15E-12 ↑↑ -2.50E-13-5.15E-12 11 3.66E-16-5.05E-12 E max [J]3.66E-16-5.01E-12 E min [J]-7.66E-13-5.18E-12 E av [J]-3.33E-13-5.11E-12  E [%] -100.05-3.29  [J] 2.37E-136.12E-14 NSD[%] -71.00-1.19 Table II Characteristics comparison of standard and NSDDL MUX2x1 cell As a measure of SCA resistance we considered normalized standard deviation. The total improvement of the resistivity to SCA in comparison with standard multiplexer cell is about 60 times in favor to MUX2x1 NSDDL cell.

10. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 10 - DAAD Fig.5 Layout of SCA resistant MUX2x1 cell Fig.6 Energy consumption during ten cycles of input signal change for both cells Figure 6 shows profile of energy consumption during ten cycles of input signal change for both cells. Standard MUX2x1 cell characterize lower average energy and considerable dispersion of values corresponding to particular input signal combinations. Oppositely, the energy profile of MUX2x1 NSDDL cell shows no deviation and is very uniform.

11. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 11 - DAAD Conclusion This paper presents simulation results that prove resistance of MUX2x1 cell designed by NSDDL method to side channel attack. The resistance to SCA was monitored through energies required for output transition under different combination of input signal. The cell is resistive if all changes require the same energy. As a measure for a cell resistance to SCA we considered standard deviation normalized to the average energy (NSD). NSDDL cell has NSD nearly 1%. This is 60 times less with regard to standard cell. This is sufficient to conclude that MUX2x1 NSDDL cell is immune to SCA.

12. Projekt „ESSNBS“ Niš, November 4 th – 7 th, 2012 - 12 - DAAD Thank you for attention