@misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {Breaking of an Open Source Fully Balanced Elliptic Curve Design using Automated Simple SCA}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-23}, pages = {2}, language = {en} } @misc{KlannKabinDykaetal., author = {Klann, Dan and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Efficient Implementation of Unified ECC Accelerators based on the Karatsuba Multiplication Method}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-24}, pages = {2}, language = {en} } @misc{AftowiczKlannKabinetal., author = {Aftowicz, Marcin and Klann, Dan and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Extended Horizontal SCA Attack using Clustering Algorithm}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-25}, pages = {2}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {FFT based Horizontal SCA Attack against ECC}, series = {2021 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, journal = {2021 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, isbn = {978-1-6654-4400-2}, issn = {2157-4960}, doi = {10.1109/NTMS49979.2021.9432665}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {Resistance of the Montgomery Ladder against Simple SCA: Theory and Practice}, series = {Journal of Electronic Testing}, volume = {37}, journal = {Journal of Electronic Testing}, number = {3}, issn = {1573-0727}, doi = {10.1007/s10836-021-05951-3}, pages = {289 -- 303}, language = {en} } @misc{PetrykDykaPerezetal., author = {Petryk, Dmytro and Dyka, Zoya and P{\´e}rez, Eduardo and Kabin, Ievgen and Katzer, Jens and Sch{\"a}ffner, Jan and Langend{\"o}rfer, Peter}, title = {Sensitivity of HfO2-based RRAM Cells to Laser Irradiation}, series = {Microprocessors and Microsystems}, journal = {Microprocessors and Microsystems}, number = {87}, issn = {0141-9331}, doi = {10.1016/j.micpro.2021.104376}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Sch{\"a}ffner, Jan and Langend{\"o}rfer, Peter}, title = {On the Complexity of Attacking Commercial Authentication Products}, series = {Microprocessors and Microsystems}, journal = {Microprocessors and Microsystems}, number = {80}, issn = {0141-9331}, doi = {10.1016/j.micpro.2020.103480}, language = {en} } @misc{KabinDykaLangendoerfer, author = {Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Atomicity and Regularity Principles do not Ensure Full Resistance of ECC Designs against Single-Trace Attacks}, series = {Sensors}, volume = {22}, journal = {Sensors}, number = {8}, issn = {1424-8220}, doi = {10.3390/s22083083}, language = {en} } @misc{DykaKabinBrzozowskietal., author = {Dyka, Zoya and Kabin, Ievgen and Brzozowski, Marcin and Panic, Goran and Calligaro, Cristiano and Krstic, Milos and Langend{\"o}rfer, Peter}, title = {On the SCA Resistance of Crypto IP Cores}, series = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, journal = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, isbn = {978-1-6654-5707-1}, issn = {2373-0862}, doi = {10.1109/LATS57337.2022.9937007}, pages = {2}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Distributed Artificial Intelligence as a Means to Achieve Self-X-Functions for Increasing Resilience: the First Steps}, series = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, journal = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797193}, pages = {6}, language = {en} } @misc{PetrykKabinLangendoerferetal., author = {Petryk, Dmytro and Kabin, Ievgen and Langendoerfer, Peter and Dyka, Zoya}, title = {Horizontal attack against EC kP accelerator under laser illumination}, series = {Electronics}, volume = {14}, journal = {Electronics}, number = {10}, editor = {Kotulski, Zbigniew}, publisher = {MDPI}, address = {Basel}, issn = {2079-9292}, doi = {10.3390/electronics14102072}, pages = {1 -- 21}, abstract = {Devices employing cryptographic approaches have to be resistant to physical attacks. Side-Channel Analysis (SCA) and Fault Injection (FI) attacks are frequently used to reveal cryptographic keys. In this paper, we present a combined SCA and laser illumination attack against an Elliptic Curve Scalar Multiplication accelerator, while using different equipment for the measurement of its power traces, i.e., we performed the measurements using a current probe from Riscure and a differential probe from Teledyne LeCroy, with an attack success of 70\% and 90\%, respectively. Our experiments showed that laser illumination increased the power consumption of the chip, especially its static power consumption, but the success of the horizontal power analysis attacks changed insignificantly. After applying 100\% of the laser beam output power and illuminating the smallest area of 143 µm² , we observed an offset of 17 mV in the measured trace. We assume that using a laser with a high laser beam power, as well as concentrating on measuring and analysing only static current, can significantly improve the attack's success. The attacks exploiting the Static Current under Laser Illumination (SCuLI attacks) are novel, and their potential has not yet been fully investigated. These attacks can be especially dangerous against cryptographic chips manufactured in downscaling technologies. If such attacks are feasible, appropriate countermeasures have to be proposed in the future.}, language = {en} } @misc{DykaKabinBrzozowskietal., author = {Dyka, Zoya and Kabin, Ievgen and Brzozowski, Marcin and Panic, Goran and Calligaro, Cristiano and Krstic, Milos and Langendoerfer, Peter}, title = {On the influence of cell libraries and other parameters to SCA resistance of crypto IP cores}, series = {2024 13th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2024 13th Mediterranean Conference on Embedded Computing (MECO)}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {979-8-3503-8756-8}, doi = {10.1109/MECO62516.2024.10577776}, pages = {1 -- 5}, abstract = {The ever-growing complexity of modern systems as well as the shrinking time to market enforces the use of already designed hardware components i.e. hard and soft IP cores. The fact that also requirements with respect to security significantly increased and that side-channel analysis (SCA) attacks are meanwhile a well-known threat it is paramount to ensure SCA resistance of ASICs and FPGA implementations derived from cryptographic IP cores. This requires to evaluate this feature for each IP core and target technology even down to the level of the cell library. The experiments reported here clearly show that the three available cell libraries even though developed for the same 130nm technology of IHP exhibit different sensitivity to SCA attacks ranging from quite resistant to very vulnerable.}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Resilient movement planning for continuum robots}, series = {MODeM 2024 : Multi-Objective Decision Making Workshop at ECAI 2024, 20 October 2024, Santiago de Compostela, Spain}, journal = {MODeM 2024 : Multi-Objective Decision Making Workshop at ECAI 2024, 20 October 2024, Santiago de Compostela, Spain}, doi = {10.48550/arXiv.2404.06178}, pages = {1 -- 7}, abstract = {The paper presents an experimental study of resilient path planning for con-tinuum robots taking into account the multi-objective optimisation problem. To do this, we used two well-known algorithms, namely Genetic algorithm and A* algorithm, for path planning and the Analytical Hierarchy Process algorithm for paths evaluation. In our experiment Analytical Hierarchy Process algorithm considers four different criteria, i.e. distance, motors damage, mechanical damage and accuracy each considered to contribute to the resilience of a continuum robot. The use of different criteria is necessary to increasing the time to maintenance operations of the robot. The experiment shows that on the one hand both algorithms can be used in combination with Analytical Hierarchy Process algorithm for multi criteria path-planning, while Genetic algorithm shows superior performance in the comparison of the two algorithms.}, language = {en} } @misc{KabinLangendoerferDyka, author = {Kabin, Ievgen and Langendoerfer, Peter and Dyka, Zoya}, title = {On the SCA resistance of TMR-protected cryptographic designs}, series = {Electronics}, volume = {14}, journal = {Electronics}, number = {16}, publisher = {MDPI}, address = {Basel}, issn = {2079-9292}, doi = {10.3390/electronics14163318}, pages = {1 -- 15}, abstract = {The influence of redundant implementations on success of physical attacks against cryptographic devices is currently under-researched. This is especially an issue in application fields such as wearable health, industrial control systems and the like in which devices are accessible to potential attackers. This paper presents results of an investigation of the TMR application impact on the vulnerability of FPGA-based asymmetric cryptographic accelerators to side-channel analysis attacks. We implemented our cryptographic cores using full- and partial-TMR application approaches and experimentally conducted evaluation of their side-channel resistance. Our results reveal that TMR can significantly impact side-channel leakage, either increasing resistance by introducing noise or amplifying leakage depending on the part of the design where redundancy was applied.}, language = {en} } @misc{PidvalnyiKostenkoSudakovetal., author = {Pidvalnyi, Illia and Kostenko, Anna and Sudakov, Oleksandr and Isaev, Dmytro and Maximyuk, Oleksandr and Krishtal, Oleg and Iegorova, Olena and Kabin, Ievgen and Dyka, Zoya and Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {Classification of epileptic seizures by simple machine learning techniques : application to animals' electroencephalography signals}, series = {IEEE access}, volume = {13}, journal = {IEEE access}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, address = {Piscataway, NJ}, issn = {2169-3536}, doi = {10.1109/ACCESS.2025.3527866}, pages = {8951 -- 8962}, abstract = {Detection and prediction of the onset of seizures are among the most challenging problems in epilepsy diagnostics and treatment. Small electronic devices capable of doing that will improve the quality of life for epilepsy patients while also open new opportunities for pharmacological intervention. This paper presents a novel approach using machine learning techniques to detect seizures onset using intracranial electroencephalography (EEG) signals. The proposed approach was tested on intracranial EEG data recorded in rats with pilocarpine model of temporal lobe epilepsy. A principal component analysis was applied for feature selection before using a support vector machine for the detection of seizures. Hjorth's parameters and Daubechies discrete wavelet transform coefficients were found to be the most informative features of EEG data. We found that the support vector machine approach had a classification sensitivity of 90\% and a specificity of 74\% for detecting ictal episodes. Changing the epoch parameter from one to twenty-one seconds results in changing the redistribution of principal components' values to 10\% but does not affect the classification result. Support vector machines are accessible and convenient methods for classification that have achieved promising classification quality, and are rather lightweight compared to other machine learning methods. So we suggest their future use in mobile devices for early epileptic seizure and preictal episode detection.}, language = {en} } @misc{KabinLangendoerferDyka, author = {Kabin, Ievgen and Langendoerfer, Peter and Dyka, Zoya}, title = {Impact of thermal effects on cryptographic resilience : a study of an ASIC implementation of the Montgomery ladder}, series = {2025 IEEE 26th Latin American Test Symposium (LATS)}, journal = {2025 IEEE 26th Latin American Test Symposium (LATS)}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, address = {Piscataway, NJ}, isbn = {978-1-6654-7763-5}, doi = {10.1109/LATS65346.2025.10963949}, pages = {1 -- 4}, abstract = {The side-channel attack resistance of hardware implementations of cryptographic algorithms can vary significantly with operating parameters, such as operating voltage, clock frequency, temperature, etc. This study investigates the influence of temperature on the resilience of an ASIC implementation of the Montgomery ladder against SCA. We conducted a series of experiments to evaluate how varying temperature conditions impact the resistance of our ASIC to horizontal attacks. Our results reveal that in contrast to the state-of-the-art approach of increasing the operating temperature, operating under sub-zero temperatures can result in increased vulnerability to side-channel attacks compared to high temperature experiments. We present a detailed analysis of the thermal sensitivity of our ASIC, correlating specific temperature ranges with potential security degradation.}, language = {en} } @misc{SigourouDykaLietal., author = {Sigourou, Alkistis Aikaterini and Dyka, Zoya and Li, Sze Hei and Langendoerfer, Peter and Kabin, Ievgen}, title = {Revisiting atomic patterns for elliptic curve scalar multiplication revealing inherent vulnerability to simple SCA}, series = {2025 12th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, journal = {2025 12th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, address = {Piscataway, NJ}, isbn = {979-8-3315-5276-3}, doi = {10.1109/NTMS65597.2025.11076762}, pages = {252 -- 258}, abstract = {Elliptic Curve Scalar Multiplication, denoted as kP operation, is the basic operation in all Elliptic Curve-based cryptographic protocols. The atomicity principle and different atomic patterns for kP algorithms were proposed in the past as countermeasures against simple side-channel analysis. In this work, we investigated the resistance of a kP algorithm implemented in hardware using Longa's atomic patterns. We analysed its simulated power trace. We show in the example of our kP implementation for the NIST EC P-256 that the field squaring operations are distinguishable from the field multiplications even if they are performed by the same field multiplier, due to the addressing of the second multiplicand. This inherent vulnerability of atomic patterns can be successfully exploited to reveal the scalar k.}, language = {en} } @misc{PetrykKabinLangendoerferetal., author = {Petryk, Dmytro and Kabin, Ievgen and Langendoerfer, Peter and Dyka, Zoya}, title = {Case study : horizontal side-channel analysis attack against elliptic curve scalar multiplication accelerator under laser illumination}, series = {2025 IEEE 26th Latin American Test Symposium (LATS)}, journal = {2025 IEEE 26th Latin American Test Symposium (LATS)}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, address = {Piscataway, NJ}, doi = {10.1109/LATS65346.2025.10963958}, pages = {1 -- 4}, abstract = {Devices employing cryptographic approaches have to be resistant to physical attacks. Side-Channel Analysis (SCA) and Fault Injection (FI) attacks are frequently used to reveal cryptographic keys. In this paper, we present a combined SCA and laser illumination attack against an Elliptic Curve Scalar Multiplication accelerator using a differential probe from Teledyne LeCroy. Our experiments show that laser illumination increases the power consumption of the chip, especially its static power consumption but the success of the horizontal power analysis attacks was changed insignificantly. We assume that using a laser with a high laser beam power and concentrating on measuring and analysing only static current can improve the attack success significantly. The horizontal attacks against public key cryptosystems exploiting the Static Consumption under Laser Illumination (SCuLI attacks) are novel and their potential is not investigated yet. These attacks can be especially dangerous against cryptographic chips manufactured in scaled technologies. If such attacks are feasible, appropriate countermeasures have to be proposed in the future.}, language = {en} } @misc{SigourouDykaLangendoerferetal., author = {Sigourou, Alkistis Aikaterini and Dyka, Zoya and Langendoerfer, Peter and Kabin, Ievgen}, title = {Atomic patterns : field operation distinguishability on cryptographic ASICs}, series = {2025 IEEE International Conference on Cyber Security and Resilience (CSR)}, journal = {2025 IEEE International Conference on Cyber Security and Resilience (CSR)}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, address = {Piscataway, NJ}, isbn = {979-8-3315-3591-9}, doi = {10.1109/CSR64739.2025.11130154}, pages = {990 -- 995}, abstract = {Scalar multiplication kP is the most frequently attacked operation in Elliptic Curve Cryptosystems (ECC) protocols. To counter simple Side-Channel Analysis (SCA), the atomicity principle and various atomic block constructions have been proposed in the past. In this paper, we demonstrate that binary kP algorithms based on atomic patterns remain vulnerable to simple SCA, due to different energy consumption of the field multiplier while obtaining the second multiplicand for field multiplication or squaring operations. The reasons for this difference are the data-bit as well as the address-bit effects. Please note, this leakage does not depend on the multiplication formula used. We validate this vulnerability through experiments using Longa's atomic patterns, revealing that such leakage significantly compromises the SCA resistance of numerous atomic implementations and facilitates potential key extraction. We conclude by providing some potential solutions to mitigate the revealed vulnerability.}, language = {en} }