Description
The device does not contain sufficient protection
mechanisms to prevent physical side channels from exposing
sensitive information due to patterns in physically observable
phenomena such as variations in power consumption,
electromagnetic emissions (EME), or acoustic emissions.
Potential Impact
- Confidentiality: Read Memory
How to Fix
Architecture and Design
Apply blinding or masking techniques to implementations of cryptographic algorithms.
Implementation
Add shielding or tamper-resistant protections to the device to increase the difficulty of obtaining measurements of the side-channel.
Detection Methods
- Manual Analysis: Perform a set of leakage detection tests such as the procedure outlined in the Test Vector Leakage Assessment (TVLA) test requirements for AES [REF-1230]. TVLA is the basis for the ISO standard 17825...
- Manual Analysis: Post-silicon, perform full side-channel attacks (penetration testing) covering as many known leakage models as possible against test code....
- Manual Analysis: Pre-silicon - while the aforementioned TVLA methods can be performed post-silicon, models of device power consumption or other physical emanations can be built from information present at various stag...
Related Weaknesses
References
View on MITRE CWE Database →
