Luke Teyssier, Senior Staff Engineer, Differential Power Analysis,
Cryptography Research, Inc.

As systems become more connected and mission-critical, security has moved from a value-added feature to a critical requirement. Design engineers may be temped to add an encryption feature and believe their system is protected. However, an un-hardened system might contain leaks that could catastrophically compromise security. Power analysis can be used to observe the internal functions of an unsecured device and extract the secret key. Data from a real implementation is analyzed to show how the key is systematically extracted. Methods to defeat power analysis and timing attacks are also presented to help engineers build systems protected from these attacks.