Side-channel attacks compare side-channel leakage predictions or estimations with side-channel leakage measurements. The estimations are based on the exact value of a few select state bits. If it is impossible to calculate the value of the state bits, it is also impossible to estimate the side-channel leakage and a side-channel attack cannot be mounted. The leakage can be measured, but cannot be estimated. In this paper, we first give an analysis of the size of the search space related to the smallest subset of state bits. Then we propose some techniques to make side-channel leakage tolerant architectures. These are architectures of which it is more difficult to calculate the value of the state bits. The architectures still leak side-channel data. Yet, the information content is less easy to exploit
['Kris Tiri', 'Patrick Schaumont', 'Ingrid Verbauwhede']
Side-Channel Leakage Tolerant Architectures