Breaking Trivium Stream Cipher Implemented in ASIC Using Experimental Attacks and DFA

. 2020 Dec 3;20(23):6909. doi: 10.3390/s20236909

Algorithm 1: Ideal Attack Process—Fault Injection.

Require: Attack Clock Cycle $(A C C)$
Require: Fault = 1
return Key stream ${z_{i}}_{i = 1}^{N}$
for $i = {1} t o {N}$ do
$z_{i} \leftarrow S_{65} ⨁ S_{92} ⨁ S_{161} ⨁ S_{176} ⨁ S_{242} ⨁ S_{287}$
if $i = A C C$ then
$t_{1} \leftarrow S_{65} ⨁ S_{90} • S_{91} ⨁ S_{92} ⨁ S_{170} ⨁ F a u l t$
else
$t_{1} \leftarrow S_{65} ⨁ S_{90} • S_{91} ⨁ S_{92} ⨁ S_{170}$
end if
$t_{2} \leftarrow S_{161} ⨁ S_{174} • S_{175} ⨁ S_{176} ⨁ S_{263}$
$t_{3} \leftarrow S_{242} ⨁ S_{285} • S_{286} ⨁ S_{287} ⨁ S_{68}$
$(S_{0}, S_{1}, \dots, S_{92}) \leftarrow (t_{3}, S_{0}, \dots, S_{91})$
$(S_{93}, S_{94}, \dots, S_{176}) \leftarrow (t_{1}, S_{93}, \dots, S_{175})$
$(S_{177}, S_{178}, \dots, S_{287}) \leftarrow (t_{2}, S_{177}, \dots, S_{286})$
end for