Search papers, labs, and topics across Lattice.
This paper introduces Anderson-Darling Leakage Assessment (ADLA), a novel side-channel leakage detection framework that utilizes the Anderson-Darling test to compare cumulative distribution functions, overcoming the limitations of traditional TVLA's mean-shift focus. ADLA is shown to be more sensitive than TVLA, particularly in detecting leakage in neural network implementations protected by shuffling and random jitter countermeasures. Experiments on an MLP implemented on ChipWhisperer-Husky demonstrate ADLA's ability to detect leakage with fewer traces compared to TVLA.
TVLA misses subtle side-channel leakage in neural networks, but a new statistical test closes the gap.
Test Vector Leakage Assessment (TVLA) based on Welch's $t$-test has become a standard tool for detecting side-channel leakage. However, its mean-based nature can limit sensitivity when leakage manifests primarily through higher-order distributional differences. As our experiments show, this property becomes especially crucial when it comes to evaluating neural network implementations. In this work, we propose Anderson--Darling Leakage Assessment (ADLA), a leakage detection framework that applies the two-sample Anderson--Darling test for leakage detection. Unlike TVLA, ADLA tests equality of the full cumulative distribution functions and does not rely on a purely mean-shift model. We evaluate ADLA on a multilayer perceptron (MLP) trained on MNIST and implemented on a ChipWhisperer-Husky evaluation platform. We consider protected implementations employing shuffling and random jitter countermeasures. Our results show that ADLA can provide improved leakage-detection sensitivity in protected implementations for a low number of traces compared to TVLA.