{"id":"https://openalex.org/W4401414115","doi":"https://doi.org/10.1109/access.2024.3440370","title":"Cloning Hardware Wallet Without Valid Credentials Through Side-Channel Analysis of Hash Function","display_name":"Cloning Hardware Wallet Without Valid Credentials Through Side-Channel Analysis of Hash Function","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4401414115","doi":"https://doi.org/10.1109/access.2024.3440370"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3440370","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3440370","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3440370","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032212424","display_name":"Dongjun Park","orcid":"https://orcid.org/0000-0002-4820-389X"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dongjun Park","raw_affiliation_strings":["Institute of Cyber Security and Privacy (ICSP), Korea University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-4820-389X","affiliations":[{"raw_affiliation_string":"Institute of Cyber Security and Privacy (ICSP), Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106290707","display_name":"J. H. Kim","orcid":"https://orcid.org/0009-0008-9309-2739"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Joonsup Kim","raw_affiliation_strings":["Institute of Cyber Security and Privacy (ICSP), Korea University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0009-0008-9309-2739","affiliations":[{"raw_affiliation_string":"Institute of Cyber Security and Privacy (ICSP), Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033997748","display_name":"Hee Seok Kim","orcid":"https://orcid.org/0000-0001-8137-4810"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"HeeSeok Kim","raw_affiliation_strings":["Department of AI Cyber Security, College of Science and Technology, Korea University, Sejong-si, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-8137-4810","affiliations":[{"raw_affiliation_string":"Department of AI Cyber Security, College of Science and Technology, Korea University, Sejong-si, South Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078931547","display_name":"Seokhie Hong","orcid":"https://orcid.org/0000-0001-7506-4023"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seokhie Hong","raw_affiliation_strings":["Institute of Cyber Security and Privacy (ICSP), Korea University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-7506-4023","affiliations":[{"raw_affiliation_string":"Institute of Cyber Security and Privacy (ICSP), Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I197347611"],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":0.6982,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.75540642,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"12","issue":null,"first_page":"132677","last_page":"132688"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8181390762329102},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.8165565729141235},{"id":"https://openalex.org/keywords/hash-based-message-authentication-code","display_name":"Hash-based message authentication code","score":0.8123090267181396},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.7378712892532349},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5934850573539734},{"id":"https://openalex.org/keywords/cryptographic-hash-function","display_name":"Cryptographic hash function","score":0.5536867380142212},{"id":"https://openalex.org/keywords/message-authentication-code","display_name":"Message authentication code","score":0.531059741973877},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4843493700027466},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.42770087718963623},{"id":"https://openalex.org/keywords/power-analysis","display_name":"Power analysis","score":0.4170915484428406},{"id":"https://openalex.org/keywords/hardware-security-module","display_name":"Hardware security module","score":0.4156496226787567},{"id":"https://openalex.org/keywords/hash-chain","display_name":"Hash chain","score":0.4117434024810791},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3953220248222351},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3690723180770874},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32262080907821655}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8181390762329102},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.8165565729141235},{"id":"https://openalex.org/C100485629","wikidata":"https://www.wikidata.org/wiki/Q1669397","display_name":"Hash-based message authentication code","level":4,"score":0.8123090267181396},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.7378712892532349},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5934850573539734},{"id":"https://openalex.org/C7608002","wikidata":"https://www.wikidata.org/wiki/Q477202","display_name":"Cryptographic hash function","level":3,"score":0.5536867380142212},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.531059741973877},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4843493700027466},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.42770087718963623},{"id":"https://openalex.org/C71743495","wikidata":"https://www.wikidata.org/wiki/Q2845210","display_name":"Power analysis","level":3,"score":0.4170915484428406},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.4156496226787567},{"id":"https://openalex.org/C135783594","wikidata":"https://www.wikidata.org/wiki/Q5678864","display_name":"Hash chain","level":3,"score":0.4117434024810791},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3953220248222351},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3690723180770874},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32262080907821655}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3440370","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3440370","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a673dd9ae59b464f8146d3efc3e3ef26","is_oa":true,"landing_page_url":"https://doaj.org/article/a673dd9ae59b464f8146d3efc3e3ef26","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 132677-132688 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3440370","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3440370","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1511843316","https://openalex.org/W1562542037","https://openalex.org/W1565672720","https://openalex.org/W1592644319","https://openalex.org/W1734836454","https://openalex.org/W2154909745","https://openalex.org/W2294424750","https://openalex.org/W2312683735","https://openalex.org/W2774639120","https://openalex.org/W2782830553","https://openalex.org/W2947113524","https://openalex.org/W2970909215","https://openalex.org/W2979255472","https://openalex.org/W3026248346","https://openalex.org/W3042003498","https://openalex.org/W3109381102","https://openalex.org/W3115917494","https://openalex.org/W3210139272","https://openalex.org/W4248175462","https://openalex.org/W4256477176","https://openalex.org/W4380079998","https://openalex.org/W4381936905"],"related_works":["https://openalex.org/W1528628021","https://openalex.org/W2280933377","https://openalex.org/W2390538912","https://openalex.org/W4312776354","https://openalex.org/W2940282503","https://openalex.org/W1989379795","https://openalex.org/W2157901542","https://openalex.org/W2139378575","https://openalex.org/W1512443456","https://openalex.org/W2131300413"],"abstract_inverted_index":{"Hardware":[0],"wallets,":[1,58],"specialized":[2],"devices":[3],"designed":[4],"to":[5,84,98,159],"securely":[6],"manage":[7],"users\u2019":[8],"credentials,":[9],"play":[10],"a":[11,91,170],"crucial":[12],"role":[13],"in":[14,104],"securing":[15],"cryptocurrencies,":[16],"ensuring":[17,144],"credentials":[18,83],"remain":[19,45],"under":[20],"user":[21],"control":[22],"without":[23,169],"reliance":[24],"on":[25,32,56,95],"third-party":[26],"entities.":[27],"However,":[28],"despite":[29],"extensive":[30],"research":[31],"Side-Channel":[33],"Analysis":[34],"(SCA)":[35],"attacks,":[36],"studies":[37],"specifically":[38],"addressing":[39],"their":[40],"implications":[41],"for":[42,155,178],"hardware":[43,57,96,108],"wallets":[44,97],"relatively":[46],"limited.":[47],"While":[48],"previous":[49],"work":[50],"has":[51],"demonstrated":[52],"various":[53],"SCA":[54,93],"attacks":[55,62,76],"most":[59],"of":[60,70,107,120,147],"these":[61],"require":[63,81],"sophisticated":[64],"environmental":[65],"controls":[66],"or":[67,127],"detailed":[68],"knowledge":[69],"target":[71,149],"device.":[72],"In":[73],"addition,":[74],"some":[75],"assume":[77],"unrealistic":[78],"scenarios":[79],"that":[80],"valid":[82],"conduct":[85],"the":[86,105,118,121,130,137,145,148,156,161,174,179],"attacks.":[87],"This":[88],"paper":[89],"introduces":[90],"novel":[92],"attack":[94,112,141,165],"extract":[99],"master":[100],"seeds\u2014a":[101],"foundational":[102],"component":[103],"security":[106],"wallets.":[109],"Our":[110],"proposed":[111],"leverages":[113],"power":[114],"traces":[115],"obtained":[116],"during":[117],"processing":[119],"Keyed-Hash":[122],"Message":[123],"Authentication":[124],"Code":[125],"(HMAC),":[126],"more":[128],"precisely,":[129],"Secure":[131],"Hash":[132],"Algorithm":[133],"2":[134],"(SHA-2)":[135],"inside":[136],"HMAC.":[138],"Notably,":[139],"our":[140,164],"is":[142],"non-invasive,":[143],"integrity":[146],"device,":[150],"thereby":[151],"making":[152],"it":[153],"difficult":[154],"wallet":[157],"owners":[158],"detect":[160],"attack.":[162,180],"Furthermore,":[163],"can":[166],"be":[167],"conducted":[168],"profiling":[171],"phase,":[172],"excluding":[173],"excessive":[175],"capabilities":[176],"required":[177]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}