2062
Relevant to the view "Hardware Design" (CWE-1194)
Nature Type ID Name Page
ChildOf 203 Observable Discrepancy 518
Weakness Ordinalities
Primary :
Resultant :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality Read Memory
Read Application Data
Detection Methods
Manual Analysis
Perform a set of leakage detection tests such as the procedure outlined in the Test Vector
Leakage Assessment (TVLA) test requirements for AES [REF-1230]. TVLA is the basis for the
ISO standard 17825 [REF-1229]. A separate methodology is provided by [REF-1228]. Note that
sole reliance on this method might not yield expected results [REF-1239] [REF-1240].
Effectiveness = Moderate
Manual Analysis
Post-silicon, perform full side-channel attacks (penetration testing) covering as many known
leakage models as possible against test code.
Effectiveness = Moderate
Manual Analysis
Pre-silicon - while the aforementioned TVLA methods can be performed post-silicon, models of
device power consumption or other physical emanations can be built from information present at
various stages of the hardware design process before fabrication. TVLA or known side-channel
attacks can be applied to these simulated traces and countermeasures applied before tape-out.
Academic research in this field includes [REF-1231] [REF-1232] [REF-1233].
Effectiveness = Moderate
Potential Mitigations
Phase: Architecture and Design
Apply blinding or masking techniques to implementations of cryptographic algorithms.
Phase: Implementation
Add shielding or tamper-resistant protections to the device to increase the difficulty of obtaining
measurements of the side-channel.
Demonstrative Examples
CWE Version 4.14
CWE-1300: Improper Protection of Physical Side Channels
CWE-1300: Improper Protection of Physical Side Channels