Patrick Haddad

photo_patrick_haddad Speaker Name: Patrick Haddad

Title: Electromagnetic Harmonic Attack on Transient Effect Ring Oscillator Based True Random Number Generator


Random number generation is a critical issue in most cryptographic appli- cations. Random numbers are used as confidential keys, but also as initial- ization vectors, challenges, nonces and masks in side channel attack coun- termeasures. For this reason, a security flaw in random number generation has a direct impact on the security of the whole cryptographic system. Con-trary to generators used for Monte Carlo simulations, those designed for cryptography must also generate unpredictable random numbers. The vulnerability of TRNGs to non-invasive attacks has been recently highlighted

Our paper presents a contactless attack on a TERO based TRNGs us- ing electromagnetic waves. Experiments show that a global exposure of the tested FPGA’s to parasitic electromagnetic fields has an impact on the qual- ity of the generated randomness. More precisely, the Hamming weight of the generated random numbers were processed in real-time during the ex- periments in order to detect and correlate the abnormal behaviour of the TRNG to the parasitic signal.

About the Speaker
Patrick Haddad holds an engineering degree in microelectronic from the Ecole des Mines de Saint Etienne and a master degree in nanoelectronic devices from the Université de Provence. In 2011, he joined the Advanced System Technology (AST) group of STMicroelectronics, and he’s working on Random Number Generation (RNG) issues.
He completed his PhD degree in the context of a collaboration between STMicroelectronics and the Hubert Curien Laboratory. He is now an expert in the hardware security lab of the ANSSI (Agence Nationale de la Sécurité des Systèmes d’Information / French Network and Information Security Agency).
He’s focusing his research on RNG in integrated circuits and has authored several publications in the field of modeling and characterization of Physical True Random Number Generator (PTRNG).