%0 Conference Proceedings %T Electromagnetic Attacks on Ring Oscillator-Based True Random Number Generator %+ Laboratoire Hubert Curien (LHC) %+ Laboratoire d'Informatique de Robotique et de Microélectronique de Montpellier (LIRMM) %+ Centre Microélectronique de Provence - Site Georges Charpak (CMP-GC) (CMP-ENSMSE) %+ Conception et Test de Systèmes MICroélectroniques (SysMIC) %A Bayon, Pierre %A Bossuet, Lilian %A Aubert, Alain %A Fischer, Viktor %A Poucheret, François %A Robisson, Bruno %A Maurine, Philippe %< avec comité de lecture %( 10th International Workshop on Cryptographic Architectures Embedded in Reconfigurable Devices %B CryptArchi: Cryptographic Architectures %C Saint-Etienne, France %8 2012-06-21 %D 2012 %K Ring oscillators %K Random number generator %K FPGA %K Attack %K Electromagnetic field %Z Computer Science [cs]/Embedded Systems %Z Computer Science [cs]/Cryptography and Security [cs.CR]Conference papers %X True random number generators (TRNGs) are ubiquitous in data security as one of basic cryptographic primitives. They are primarily used as generators of condential keys, to initialize vectors, to pad values, but also as random masks generators in some side channel attacks countermeasures. As such, they must have good statistical properties, be unpredictable and robust against attacks. This paper presents a contactless and local active attack on ring oscillators (ROs) based TRNGs using electromagnetic fields. Experiments show that in a TRNG featuring fifty ROs, the impact of a local electromagnetic emanation on the ROs is so strong, that it is possible to lock them on the injected signal and thus to control the monobit bias of the TRNG output even when low power electromagnetic fields are exploited. These results conrm practically that the electromagnetic waves used for harmonic signal injection may represent a serious security threat for secure circuits that embed RO-based TRNG. %G English %L ujm-00712545 %U https://ujm.hal.science/ujm-00712545 %~ UNIV-ST-ETIENNE %~ INSTITUT-TELECOM %~ IOGS %~ CNRS %~ LAHC %~ PARISTECH %~ LORIA2 %~ SYSMIC %~ LIRMM %~ LIRMM_MIC %~ MIC %~ MIPS %~ UNIV-MONTPELLIER %~ UDL %~ INSTITUTS-TELECOM %~ AXESECULIRMM %~ UM-2015-2021