Differential fault analysis on AES by round reduction

This paper presents a practical differential fault analysis method for the Advanced Encryption Standard (AES) with a reduced round using a semi-invasive fault injection. We adapt the round reduction fault technique on AES in order to skip the 9-th round operation. We can deduce the AES 128-bit secret key using 2
¹⁶
exhaustive searches with two pairs of correct and faulty ciphertexts. We also verified the feasibility of our proposed DFA by a fault injection experiment on ATmega128 microcontroller chip.