Give me your binary, I'll tell you if it leaks

Abstract

In this paper we present a method to identify side-channel information leakage of a cryptosystem software implementation, which is performed at the binary level, and needs only a debugger. Using a new resynchronization method based on the control flow, leaking instructions are retrieved with only few traces and without leakage model. Advantageously this methodology is target agnostic, finding the side-channel leakages without the need to know how the software will be used.