Attacking GlobalPlatform SCP02-compliant Smart Cards Using a Padding Oracle Attack

We describe in this paper how to perform a padding oracle attack against the GlobalPlatform SCP02 protocol. SCP02 is implemented in smart cards and used by transport companies, in the banking world and by mobile network operators (UICC/SIM cards). The attack allows an adversary to efficiently retri...

Full description

Bibliographic Details
Main Authors: Gildas Avoine, Loïc Ferreira
Format: Article
Language:English
Published: Ruhr-Universität Bochum 2018-05-01
Series:Transactions on Cryptographic Hardware and Embedded Systems
Subjects:
Online Access:https://tches.iacr.org/index.php/TCHES/article/view/878