Characterization of Riscure 1-GHz low sensitivity probe for side channel analysis (SCA)

James T. Graham; Rusty O. Baldwin; Ashwin Sampathkumar

doi:10.1117/12.2262121

1 May 2017 Characterization of Riscure 1-GHz low sensitivity probe for side channel analysis (SCA)

James T. Graham, Rusty O. Baldwin, Ashwin Sampathkumar

Proceedings Volume 10185, Cyber Sensing 2017; 1018507 (2017) https://doi.org/10.1117/12.2262121
Event: SPIE Defense + Security, 2017, Anaheim, CA, United States

Abstract

Side-Channel Analysis (SCA) is an increasingly well-known method for non-invasively extracting information from unintended “side-channel” emissions given off by electronic devices. The common method for extracting side-channel information is via a near-field antenna probe placed in the vicinity (i.e., millimeters) of the target device. The antenna detects and amplifies the radio-frequency (RF) emissions given off by the device and transmits the information for analysis and testing. Side-channel attacks are most known for their utility in cryptanalytics; however, they can also be used to fingerprint devices or even determine the digital state of the system. In this work, characterization studies on a 1- GHz antenna using Riscure’s RF probe station are performed. For RF-SCA, the ultimate limits of signal sensitivity and frequency response are determined by the antenna characteristics. In addition, the effective source-receiver distance (SRD), cross-talk and spatial signal averaging at various SRDs have to be characterized for signal attenuation and normalization. From our testing, it appears that the Riscure probe has a peak frequency response at about 200 MHz. For example, the 418MHz antenna had multiple peaks at 130 MHz, 172 MHz, 213 MHz, and 370 MHz, as well as multiple less significant protrusions at higher frequencies. The BeeHive100C probe peaked at exactly 200 MHz but had a couple of side-lobes in the 600-800 MHz range. The Pharad 30-512 MHz antenna peaked at a slightly lower 193MHz, although, some response was observed in the 600-800 MHz range as in the other antennas. The Pharad 225-6000MHz antenna exhibited a similar peak but lesser roll-off and an elevated response at increased frequencies than its predecessor.

Conference Presentation

Citation Download Citation

James T. Graham, Rusty O. Baldwin, and Ashwin Sampathkumar "Characterization of Riscure 1-GHz low sensitivity probe for side channel analysis (SCA)", Proc. SPIE 10185, Cyber Sensing 2017, 1018507 (1 May 2017); https://doi.org/10.1117/12.2262121

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available