A New Differential Fault Attack on SPN Structure, with Application to AES Cipher

The Substitution-Permutation Network (SPN) is a main type of structure in block ciphers. This paper proposes a new and practical differential fault attack technique on SPN structure. As an instance of SPN cipher, AES-256 can be recovered by 4 faulty ciphertexts. Compared with the previous techniques, our work can recover all subkeys of an SPN cipher with all key sizes. Therefore, our attacking method on AES not only improves the efficiency of fault injection, but also decreases the number of faulty ciphertexts. It provides a new approach for fault analysis on block ciphers.