ISO/IEC 20085-1:2019 ITセキュリティ技術—暗号化モジュールでの非侵襲的攻撃軽減技術のテストに使用するためのテストツール要件とテストツールキャリブレーション方法—パート1：テストツールと技術 | ページ 6

3.1

advanced side-channel analysis

ASCA

advanced exploitation of the fact that the instantaneous side-channels emitted by a cryptographic device depends on the data it processes and on the operation it performs to retrieve secret parameters

Note 1 to entry: Not to be confused with algebraic side-channel analysis (SCA).

Note 2 to entry: The adjective “advanced”, opposed to “simple”, qualifies side-channel analyses which require multiple side-channel measurements (see 6.2).

[SOURCE:ISO/IEC 17825:2016, 3.1, modified — Notes to entry have been added.]

3.2

analysis tool

test tool component with the ability to control the measurement process, read the recorded measurements, perform post-processing of the recorded measurements, and identify any valid attacks

3.3

application-specific tool

tool dedicated to the measurements and analyses required by ISO/IEC 20085 (all parts)

Note 1 to entry: Antonym of laboratory-assembled tool.

3.4

batch measurement

measurement that includes signals related to repeated execution of one cryptographic operation with a single or with different inputs

Note 1 to entry: See Figure A.1.

3.5

cartography

procedure involving placing a sensor at various positions and taking measurements at each of them to create a spatial (or visual) representation of some data

Note 1 to entry: See A.8.

3.6

horizontal attack

ha

modus operandi where sensitive information is extracted from a single measurement split into several parts

Note 1 to entry: The single measurement can be an averaged measurement obtained from a batch of measurements where repeated operations are conducted with the same cryptographic inputs.

[SOURCE:ISO/IEC 17825:2016, 3.8, modified — Note to entry has been added.]

3.7

implementation under test

IUT

implementation which is tested based on methods specified in ISO/IEC 17825:2016

[SOURCE:ISO/IEC 17825:2016, 3.9, modified — The words “in this International Standard” have been replaced with “in ISO/IEC 17825:2016”.]

3.8

laboratory assembled tool

tool made by assembly of commercial off-the-shelf (COTS) products

Note 1 to entry: Antonym of application-specific tool (3.3) .

3.9

measurement tool

test tool component with the ability to measure signals in digital format (scalar or vector), time-synchronized with a trigger signal, and that records permanently or transiently the measurements for subsequent analysis

3.10

multivariate trace

trace made up of several samples

Note 1 to entry: Usually, a “trace” is considered multivariate.

3.11

non-invasive attack

attack that can be performed on a cryptographic module without direct physical contact with components within the cryptographic boundary of the module

Note 1 to entry: An attack that does not alter or change the state of the cryptographic module.

[SOURCE:ISO/IEC 19790:2012, 3.78]

3.12

signal-to-noise ratio

S/N

measure that compares the level of a desired signal to the level of background noise

Note 1 to entry: It is defined as the ratio of signal power to the noise power.

[SOURCE:ISO/IEC 27033‑6:2016, 3.8, modified — The abbreviated term has been added.]

3.13

univariate trace

trace made up of one sample

3.14

vertical attack

VA

modus operandi where sensitive information is extracted from different algorithm executions

Note 1 to entry: If the algorithms executions are the same, then the traces can be averaged in a view to increase their signal-to-noise ratio (3.12) , and then a horizontal attack (3.6) can be carried out.

Note 2 to entry: The definition is equivalent to: “Modus operandi where sensitive information is extracted from measurements of repeated execution of one cryptographic operation with different inputs".

[SOURCE:ISO/IEC 17825:2016, 3.17, modified — Notes to entry have been added.]