<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE ArticleSet PUBLIC "-//NLM//DTD PubMed 2.7//EN" "https://dtd.nlm.nih.gov/ncbi/pubmed/in/PubMed.dtd">
<ArticleSet>
<Article>
<Journal>
				<PublisherName>Iranian Society of Cryptology</PublisherName>
				<JournalTitle>The ISC International Journal of Information Security</JournalTitle>
				<Issn>2008-2045</Issn>
				<Volume>14</Volume>
				<Issue>3</Issue>
				<PubDate PubStatus="epublish">
					<Year>2022</Year>
					<Month>10</Month>
					<Day>01</Day>
				</PubDate>
			</Journal>
<ArticleTitle>Practical Differential Fault Analysis on CRAFT, a Lightweight Block Cipher</ArticleTitle>
<VernacularTitle></VernacularTitle>
			<FirstPage>21</FirstPage>
			<LastPage>31</LastPage>
			<ELocationID EIdType="pii">159670</ELocationID>
			
<ELocationID EIdType="doi">10.22042/isecure.2022.14.3.3</ELocationID>
			
			<Language>EN</Language>
<AuthorList>
<Author>
					<FirstName>Hamed</FirstName>
					<LastName>Ramzanipour</LastName>
<Affiliation>Electrical Engineering Department, Shahid Rajaee Teacher Training University, Tehran, Iran.</Affiliation>

</Author>
<Author>
					<FirstName>Navid</FirstName>
					<LastName>Vafaei</LastName>
<Affiliation>Electrical Engineering Department, Shahid Rajaee Teacher Training University, Tehran, Iran.</Affiliation>

</Author>
<Author>
					<FirstName>Nasour</FirstName>
					<LastName>Bagheri</LastName>
<Affiliation>Electrical Engineering Department, Shahid Rajaee Teacher Training University, Tehran, Iran.</Affiliation>

</Author>
</AuthorList>
				<PublicationType>Journal Article</PublicationType>
			<History>
				<PubDate PubStatus="received">
					<Year>2022</Year>
					<Month>10</Month>
					<Day>30</Day>
				</PubDate>
			</History>
		<Abstract>Differential fault analysis, a kind of active non-invasive attack, is an effective way of analyzing cryptographic primitives that have lately earned more attention. In this study, we apply this attack on CRAFT, a recently proposed lightweight tweakable block cipher, supported by simulation and experimental results. This cipher accepts a 64-bit Tweak, a 64-bit plaintext, and a 128-bit key to produce a 64-bit ciphertext. We assume that the target implementation of CRAFT does not use countermeasures in this paper. The considered fault model in the initial phase of this paper is a single-bit, but random nibble-injected fault, where we first present the fault injection attack as a simulation and then report on how to retrieve the round sub-keys. Next, we use frequency glitch as a fault injection technique in the experimental phase. This part aims to produce a single fault at a nibble in a specific round of the CRAFT. Following our statistical analysis and according to the simulation findings, we can reduce the key space to 30.28 and 24.37 bits, respectively, by using 4 and 5 faults. The experimental section also identifies the location of random faults injected by the hardware mechanism.</Abstract>
		<ObjectList>
			<Object Type="keyword">
			<Param Name="value">Differential Fault Analysis</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">CRAFT</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Implementation of Fault Attack</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Glitch Frequency</Param>
			</Object>
		</ObjectList>
<ArchiveCopySource DocType="pdf">https://www.isecure-journal.com/article_159670_2af76d63d8291f42d1236cdb2f1015cb.pdf</ArchiveCopySource>
</Article>
</ArticleSet>
