Test Vector Leakage Assessment

Values given below are recommendations that should maximize leakage. If you have better recommendations or feedbacks about this tool, we would love hearing them.

Algorithm

AES

Key length

128 192 256

General Test: Fixed-vs.-Random Data Datasets
General Test: Fixed-vs.-Random Key Datasets

Fixed set of traces: fixed input data and fixed key

The key on the device should be

The input data should be

Random set of traces: random input data and fixed key

The key on the device should be

The generation key for plaintext should be

The input data should be

Fixed set: random input data and fixed key

The key on the device should be

The generation key for plaintext should be

The input data should be

Random set: random input data and random keys

The generation key for key and plaintext should be

The key should be The key should be the concatenation of pairs of values, truncated to 192 bits, The key should be the concatenation of pairs of values,

The input data should be

Acquisition parameters

These should be carefully chosen and reported:

Number of traces for each set.
Gain should be set to measure the full dynamic range.
Sampling rate can be set to 5 times the bandwidth and then refined.
Input bandwidth should be at least twice the target clock frequency.
Alignment method can be least squared distance to a reference trace.
Remember to also report probes, filters and amplifiers used (if any).

References

Carolyn Whitnall and Elisabeth Oswald, "A Critical Analysis of ISO 17825 (`Testing methods for the mitigation of non-invasive attack classes against cryptographic modules')", 2019, https://eprint.iacr.org/2019/1013
Gilbert Goodwill, Benjamin Jun, Josh Jaffe and Pankaj Rohatgi, A testing methodology for sidechannel resistance validation, 2011, https://csrc.nist.gov/csrc/media/events/non-invasive-attack-testing-workshop/documents/08_goodwill.pdf
Rambus, Test Vector Leakage Assessment (TVLA) Derived Test Requirements (DTR) with AES 2015, https://www.rambus.com/wp-content/uploads/2015/08/TVLA-DTR-with-AES.pdf