liveBook · Manning

Non-invasive attack

As explained in Real-World Cryptography

A non-invasive attack extracts information from a device without physically altering the targeted device.

A non-invasive attack extracts information from a device without physically altering it. Against a smart card, an attacker might study power consumption during cryptographic operations to recover secret keys. section 13.2.2

Hardware attacks fall into three broad categories:

  • Non-invasive attacks observe the device without affecting it, such as differential power analysis (DPA). section 13.2.2
  • Semi-invasive attacks access the chip surface without damaging it and may alter execution using heat or lasers. section 13.2.2
  • Invasive attacks open the chip to probe or modify its circuitry, risking visible damage or device failure. section 13.2.2

How Real-World Cryptography covers it

How deep it goes
Defines the category and illustrates DPA, but stops short of explaining measurement procedures or countermeasure design.
Examples
Uses power-consumption measurements during smart-card cryptographic operations as the concrete DPA example.
What you can do after
Evaluate whether a hardware attack observes, alters, or damages the targeted device.
How it connects
Connects non-invasive attacks with differential power analysis, smart cards, secure elements, semi-invasive attacks, and invasive attacks.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.