How to defend against smartcard attacks – Or the amazing number of different ways to check a PIN securely

Abstract

Since their invention in the 1980s, smartcards have become an universal medium for the secure storage of data and secure execution of programs. The first part of the article describes the different security elements of a smartcard system. This is completed by an explanation of the different types of smart card attacks (invasive, semi invasive, non invasive) and the corresponding mechanisms for protecting the secrets of smart cards. The second part shows on the basis of the forgoing explanations the evolution of attacks and corresponding protection mechanisms against the PIN compare function over the last twenty years.