On the Complexity of Attacking Commercial Authentication Products

In this paper we discuss the difficulties of mounting successful attacks against crypto implementations if essential information is missing. We start with a detailed description our attack own design, to highlight which needed increase success an attack, i.e. use it as blueprint following commercially available chips. would like stress that design very similar what happens during certification e.g. according Common Criteria Standard in those cases manufacturer needs provide information. If attacking commercial designs without signing NDAs, were forced intensively search Internet for about designs. able reveal on processing sequence authentication process even identifying clock cycles individual key bits are processed. But could not private keys used by attacked chips 100% correctly. Moreover, did knew evaluate attack. To summarize, effort such significantly higher than one well-known implementation.