Abstract Persistent fault analysis is effective when a single element of the S-box is altered. However, most fault injection techniques tend to induce multiple faults. In such multiple-fault scenarios, existing key recovery methods either fail to identify the unique key or require high computational complexity. To address this, we propose the count-ranking method to accelerate Persistent-Fault Based Differential Analysis (PFDA). The method counts subkey byte frequencies and selects the most frequent value per byte. Additionally, this approach allows us to further explore faults occurring during deeper rounds of encryption, as it independently determines the unique value of each subkey byte. Consequently, we successfully recover the unique key for both serial and parallel implementations of AES with a complexity of O (Nf² Nc) O (N f 2 × N c) table lookups. Finally, the count-ranking method facilitates the recovery of several subkeys in Feistel ciphers without dramatically increasing the number of key candidates. We apply the revised PFDA to both DES and Camellia, efficiently achieving full-key recovery. These results demonstrate the practical applicability of the extended PFDA across both serial and parallel cipher architectures.
Chen et al. (Wed,) studied this question.