New Type of Collision Attack on First-Order Masked AES

Abstract

This paper introduces a new type of collision attack on first-order masked AES. This attack is a known-plaintext attack, while the existing collision attacks are chosen-plaintext attacks. In addition, our method requires much fewer power measurements than the second-order differential power analyses (SODPAs) as well as the existing collision attacks. Some attack results and statistical analysis support this fact