rhme2-pieceofscake.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "# RHme2 piece of SCAke challenge"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "This is an example of using Jlsca to analyze the trace set from the simplest SCA challenge of RHme2 embedded CTF (http://rhme.riscure.com/home).\n",
    "\n",
    "The challenge features an unprotected SW AES-128 implementation on an 8-bit AVR microcontroller. You can send plaintext blocks to the device and receive blocks of ciphertext. The device LED blinks on the start of the encryption. The goal is to recover the encryption key.\n",
    "\n",
    "Power traces were acquired using ChipWhisperer Lite and accompanying software (https://wiki.newae.com/Main_Page). The trigger was at the start of the cipher execution by using the blinking LED. After some trivial exploration, first round S-boxes can could be identified. For the attack in this example, only the corresponding part of the execution was captured: 10000 samples, at 105 MS/s sampling rate.\n",
    "\n",
    "The small tarball with traces is available at https://drive.google.com/open?id=0B2slHLSL3nXaWFJ0dHVPWFJqalE, shasum `13b0a41e597cf90d495ad3322bf947e675c71c8d`. Uncompress it next to this notebook."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 1,
   "metadata": {},
   "outputs": [],
   "source": [
    "# load the tools\n",
    "using Jlsca.Sca\n",
    "using Jlsca.Trs\n",
    "using Jlsca.Align\n",
    "using Jlsca.Aes\n",
    "using PyCall\n",
    "using Plots"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "## Convert traces from ChipWhisperer capture to Trs format\n",
    "\n",
    "Needed just once to create the trs file. The rest of the code uses the trs file."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 2,
   "metadata": {},
   "outputs": [],
   "source": [
    "insfname = \"rhme2-pieceofscake-firstroundsboxes.trs\"\n",
    "\n",
    "if !isfile(insfname)\n",
    "    # prefix identifying the capture, bulky as it is\n",
    "    # (so far have been lazy to automate based on ChipWhisperer config file)\n",
    "    prefix = \"rhme2-pieceofscake-firstroundsboxes/2017.01.26-17.11.15_\"\n",
    "\n",
    "    numpy = pyimport(\"numpy\")\n",
    "    \n",
    "    # read the data from chipwhisperer capture\n",
    "    samples = numpy.load(\"$(prefix)traces.npy\");\n",
    "    input = numpy.load(\"$(prefix)textin.npy\");\n",
    "    output = numpy.load(\"$(prefix)textout.npy\");\n",
    "\n",
    "    # get sizes\n",
    "    print(size(samples))\n",
    "    print(size(input))\n",
    "    print(size(output))\n",
    "\n",
    "    # set the parameters\n",
    "    numberOfTraces = size(input)[1] #weirdly, ChipWhisperer capture saves more traces then inputs\n",
    "    numberOfSamples = size(samples)[2]\n",
    "    dataSpace = size(input)[2] + size(output)[2]\n",
    "    sampleType = Float32;\n",
    "\n",
    "    # create and save the trs\n",
    "    trs = InspectorTrace(insfname, dataSpace, sampleType, numberOfSamples)\n",
    "    for t in 1:numberOfTraces\n",
    "      trs[t] = (vcat(input[t,:],output[t,:]), map(Float32, samples[t,:]))\n",
    "    end\n",
    "    close(trs)\n",
    "end"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "## Explore the traces"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 3,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Opened rhme2-pieceofscake-firstroundsboxes.trs, #traces 135, #samples 10000 (Float32), #data 32\n"
     ]
    }
   ],
   "source": [
    "# load the traceset\n",
    "trs = InspectorTrace(insfname)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 4,
   "metadata": {},
   "outputs": [
    {
     "data": {
      "image/svg+xml": [
       "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n",
       "<svg xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" width=\"600\" height=\"400\" viewBox=\"0 0 2400 1600\">\n",
       "<defs>\n",
       "  <clipPath id=\"clip3900\">\n",
       "    <rect x=\"0\" y=\"0\" width=\"2400\" height=\"1600\"/>\n",
       "  </clipPath>\n",
       "</defs>\n",
       "<path clip-path=\"url(#clip3900)\" d=\"\n",
       "M0 1600 L2400 1600 L2400 0 L0 0  Z\n",
       "  \" fill=\"#ffffff\" fill-rule=\"evenodd\" fill-opacity=\"1\"/>\n",
       "<defs>\n",
       "  <clipPath id=\"clip3901\">\n",
       "    <rect x=\"480\" y=\"0\" width=\"1681\" height=\"1600\"/>\n",
       "  </clipPath>\n",
       "</defs>\n",
       "<path clip-path=\"url(#clip3900)\" d=\"\n",
       "M182.008 1487.47 L2352.76 1487.47 L2352.76 47.2441 L182.008 47.2441  Z\n",
       "  \" fill=\"#ffffff\" fill-rule=\"evenodd\" fill-opacity=\"1\"/>\n",
       "<defs>\n",
       "  <clipPath id=\"clip3902\">\n",
       "    <rect x=\"182\" y=\"47\" width=\"2172\" height=\"1441\"/>\n",
       "  </clipPath>\n",
       "</defs>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  190.935,1487.47 190.935,47.2441 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  716.031,1487.47 716.031,47.2441 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  1241.13,1487.47 1241.13,47.2441 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  1766.22,1487.47 1766.22,47.2441 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  2291.32,1487.47 2291.32,47.2441 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  182.008,1395.04 2352.76,1395.04 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  182.008,1068.44 2352.76,1068.44 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  182.008,741.844 2352.76,741.844 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  182.008,415.243 2352.76,415.243 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#000000; stroke-width:2; stroke-opacity:0.1; fill:none\" points=\"\n",
       "  182.008,88.6432 2352.76,88.6432 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  182.008,1487.47 2352.76,1487.47 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  182.008,1487.47 182.008,47.2441 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  190.935,1487.47 190.935,1465.87 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  716.031,1487.47 716.031,1465.87 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  1241.13,1487.47 1241.13,1465.87 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  1766.22,1487.47 1766.22,1465.87 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  2291.32,1487.47 2291.32,1465.87 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  182.008,1395.04 214.569,1395.04 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  182.008,1068.44 214.569,1068.44 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  182.008,741.844 214.569,741.844 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  182.008,415.243 214.569,415.243 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  182.008,88.6432 214.569,88.6432 \n",
       "  \"/>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:middle;\" transform=\"rotate(0, 190.935, 1541.47)\" x=\"190.935\" y=\"1541.47\">0</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:middle;\" transform=\"rotate(0, 716.031, 1541.47)\" x=\"716.031\" y=\"1541.47\">10</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:middle;\" transform=\"rotate(0, 1241.13, 1541.47)\" x=\"1241.13\" y=\"1541.47\">20</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:middle;\" transform=\"rotate(0, 1766.22, 1541.47)\" x=\"1766.22\" y=\"1541.47\">30</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:middle;\" transform=\"rotate(0, 2291.32, 1541.47)\" x=\"2291.32\" y=\"1541.47\">40</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:end;\" transform=\"rotate(0, 158.008, 1412.54)\" x=\"158.008\" y=\"1412.54\">-0.4</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:end;\" transform=\"rotate(0, 158.008, 1085.94)\" x=\"158.008\" y=\"1085.94\">-0.2</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:end;\" transform=\"rotate(0, 158.008, 759.344)\" x=\"158.008\" y=\"759.344\">0.0</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:end;\" transform=\"rotate(0, 158.008, 432.743)\" x=\"158.008\" y=\"432.743\">0.2</text>\n",
       "</g>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:end;\" transform=\"rotate(0, 158.008, 106.143)\" x=\"158.008\" y=\"106.143\">0.4</text>\n",
       "</g>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#009af9; stroke-width:1.2; stroke-opacity:1; fill:none\" points=\"\n",
       "  243.444,571.208 295.954,510.608 348.464,293.725 400.973,241.099 453.483,320.836 505.992,145.416 558.502,88.0053 611.012,140.631 663.521,244.289 716.031,371.867 \n",
       "  768.541,689.218 821.05,950.753 873.56,824.77 926.069,829.554 978.579,987.432 1031.09,936.401 1083.6,1008.16 1136.11,1172.42 1188.62,1046.44 1241.13,934.806 \n",
       "  1293.64,1024.11 1346.15,1020.92 1398.66,947.564 1451.17,1052.82 1503.68,1140.53 1556.18,805.633 1608.69,619.05 1661.2,654.134 1713.71,515.392 1766.22,501.04 \n",
       "  1818.73,646.16 1871.24,583.966 1923.75,550.476 1976.26,749.817 2028.77,904.506 2081.28,952.348 2133.79,1174.02 2186.3,1406.85 2238.81,1303.19 2291.32,1346.25 \n",
       "  \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#e26f46; stroke-width:1.2; stroke-opacity:1; fill:none\" points=\"\n",
       "  243.444,547.287 295.954,419.709 348.464,253.857 400.973,274.588 453.483,271.399 505.992,140.631 558.502,162.958 611.012,239.504 663.521,277.778 716.031,499.445 \n",
       "  768.541,866.233 821.05,918.859 873.56,794.47 926.069,899.722 978.579,963.511 1031.09,944.374 1083.6,1067.17 1136.11,1145.31 1188.62,957.132 1241.13,928.427 \n",
       "  1293.64,1043.25 1346.15,944.374 1398.66,947.564 1451.17,1111.82 1503.68,1004.97 1556.18,679.649 1608.69,617.455 1661.2,614.266 1713.71,493.066 1766.22,561.64 \n",
       "  1818.73,698.786 1871.24,564.829 1923.75,641.376 1976.26,888.559 2028.77,931.616 2081.28,1057.6 2133.79,1328.7 2186.3,1397.28 2238.81,1312.76 2291.32,1421.2 \n",
       "  \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3902)\" style=\"stroke:#3da44d; stroke-width:1.2; stroke-opacity:1; fill:none\" points=\"\n",
       "  243.444,536.124 295.954,383.03 348.464,252.262 400.973,301.699 453.483,257.046 505.992,169.336 558.502,198.042 611.012,261.831 663.521,301.699 716.031,548.882 \n",
       "  768.541,910.885 821.05,891.748 873.56,800.849 926.069,925.237 978.579,952.348 1031.09,958.727 1083.6,1097.47 1136.11,1132.55 1188.62,952.348 1241.13,966.7 \n",
       "  1293.64,1071.95 1346.15,952.348 1398.66,992.216 1451.17,1153.28 1503.68,966.7 1556.18,662.107 1608.69,639.781 1661.2,588.75 1713.71,489.877 1766.22,579.182 \n",
       "  1818.73,666.892 1871.24,545.692 1923.75,658.918 1976.26,902.911 2028.77,922.048 2081.28,1075.14 2133.79,1359 2186.3,1363.79 2238.81,1315.95 2291.32,1446.71 \n",
       "  \n",
       "  \"/>\n",
       "<path clip-path=\"url(#clip3900)\" d=\"\n",
       "M1989.93 372.684 L2280.76 372.684 L2280.76 130.764 L1989.93 130.764  Z\n",
       "  \" fill=\"#ffffff\" fill-rule=\"evenodd\" fill-opacity=\"1\"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#000000; stroke-width:4; stroke-opacity:1; fill:none\" points=\"\n",
       "  1989.93,372.684 2280.76,372.684 2280.76,130.764 1989.93,130.764 1989.93,372.684 \n",
       "  \"/>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#009af9; stroke-width:1.2; stroke-opacity:1; fill:none\" points=\"\n",
       "  2013.93,191.244 2157.93,191.244 \n",
       "  \"/>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:start;\" transform=\"rotate(0, 2181.93, 208.744)\" x=\"2181.93\" y=\"208.744\">y1</text>\n",
       "</g>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#e26f46; stroke-width:1.2; stroke-opacity:1; fill:none\" points=\"\n",
       "  2013.93,251.724 2157.93,251.724 \n",
       "  \"/>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:start;\" transform=\"rotate(0, 2181.93, 269.224)\" x=\"2181.93\" y=\"269.224\">y2</text>\n",
       "</g>\n",
       "<polyline clip-path=\"url(#clip3900)\" style=\"stroke:#3da44d; stroke-width:1.2; stroke-opacity:1; fill:none\" points=\"\n",
       "  2013.93,312.204 2157.93,312.204 \n",
       "  \"/>\n",
       "<g clip-path=\"url(#clip3900)\">\n",
       "<text style=\"fill:#000000; fill-opacity:1; font-family:Arial,Helvetica Neue,Helvetica,sans-serif; font-size:48px; text-anchor:start;\" transform=\"rotate(0, 2181.93, 329.704)\" x=\"2181.93\" y=\"329.704\">y3</text>\n",
       "</g>\n",
       "</svg>\n"
      ]
     },
     "execution_count": 4,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "# read and plot 3 traces with some zoom\n",
    "((data,samples),eof) = readTraces(trs, 1:3)\n",
    "plot(samples[1:3,1:40]', linewidth=.3) # note the transpose; and here you can play with the zoom"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "Well aligned, should be piece of cake indeed. Let's close the file for now."
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 5,
   "metadata": {},
   "outputs": [],
   "source": [
    "close(trs)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "## Run correlation power analysis\n",
    "Vanilla CPA on the first round in the good old Hamming weight leakage model"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {
    "scrolled": false
   },
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Opened rhme2-pieceofscake-firstroundsboxes.trs, #traces 135, #samples 10000 (Float32), #data 32\n",
      "\n",
      "Jlsca running in Julia version: 1.3.0, 1 processes/1 workers/2 threads per worker\n",
      "\n",
      "DPA parameters\n",
      "attack:       AES Sbox CIPHER KL128 FORWARD\n",
      "mode:         CIPHER\n",
      "key length:   KL128\n",
      "direction:    FORWARD\n",
      "xor:          false\n",
      "analysis:     Incremental CPA\n",
      "leakages:     HW\n",
      "maximization: abs global max\n",
      "data at:      1\n"
     ]
    }
   ],
   "source": [
    "trs = InspectorTrace(insfname)\n",
    "\n",
    "params = DpaAttack(AesSboxAttack(), IncrementalCPA())\n",
    "params.dataOffset = 1       # plaintext starts from byte 1\n",
    "params.attack.direction = FORWARD\n",
    "params.analysis.leakages = [HW()]\n",
    "numberOfTraces = length(trs);\n",
    "\n",
    "rankData = sca(trs, params, 1, numberOfTraces)\n",
    "key = getKey(params,rankData)"
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "Check the key using a paintext-ciphertext pair from the traceset"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": [
    "w = KeyExpansion(key, 10, 4)\n",
    "Cipher(trs[1][1][1:16], w) == trs[1][1][17:32] "
   ]
  },
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "Done."
   ]
  }
 ],
 "metadata": {
  "@webio": {
   "lastCommId": "10897c3b23f54f838e9f07a18a62af31",
   "lastKernelId": "997ca6bd-4829-409b-a311-aaf32b65676a"
  },
  "anaconda-cloud": {},
  "kernelspec": {
   "display_name": "Julia 1.3.0",
   "language": "julia",
   "name": "julia-1.3"
  },
  "language_info": {
   "file_extension": ".jl",
   "mimetype": "application/julia",
   "name": "julia",
   "version": "1.3.0"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}