In practice, the Template Attack (TA) is widely accepted as the strongest side channel attack, and it is used to evaluate the physical security of crypto devices in practice. In TA, different statistical tools, such as the Euclidean distance (ED) and the Mahalanobis distance (MD), can be used to recover the secret key used by the target device. In practice, values of different parameters influence the key-recovery efficiency of TA. However, until now, the exact relationship between the success rate (SR) of TA and different parameters is not very clear. Therefore, in order to accurately evaluate the physical security of crypto devices with TA, evaluators need to vary values of different parameters and empirically evaluate the SR of TA in different cases. Considering that both the computational complexity and the measurement complexity of the empirical evaluation are high, this may induce unnecessary evaluation overhead and make the evaluation period long. In light of this, in this paper, the exact relationship between the SR of TA and values of different parameters is theoretically analyzed, and the soundness of the theoretical analysis is empirically verified in both simulated and real scenarios. Then, by setting the values of different parameters, the SR of TA can be accurately and efficiently estimated. Overall, this contribution may help evaluators to efficiently evaluate the physical security of crypto devices with TA in practice.

中文翻译：

---

模板攻击成功率与不同参数的确切关系

在实践中，模板攻击（TA）被广泛接受为最强的边信道攻击，并且在实践中用于评估加密设备的物理安全性。在TA中，可以使用不同的统计工具，例如欧几里德距离（ED）和马氏距离（MD），来恢复目标设备使用的密钥。实际上，不同参数的值会影响TA的密钥恢复效率。但是，到目前为止，TA的成功率（SR）与不同参数之间的确切关系还不清楚。因此，为了准确地评估具有TA的加密设备的物理安全性，评估人员需要改变不同参数的值，并在不同情况下凭经验评估TA的SR。考虑到经验评估的计算复杂度和测量复杂度都很高，这可能会引起不必要的评估开销，并使评估周期变长。有鉴于此，本文从理论上分析了TA的SR与不同参数值之间的精确关系，并在模拟和实际情况下均通过实验验证了理论分析的正确性。然后，通过设置不同参数的值，可以准确有效地估计TA的SR。总体而言，此贡献可帮助评估人员在实践中有效评估具有TA的加密设备的物理安全性。从理论上分析了TA的SR与不同参数值之间的精确关系，并在模拟和实际情况下通过实验验证了理论分析的正确性。然后，通过设置不同参数的值，可以准确有效地估计TA的SR。总体而言，此贡献可帮助评估人员在实践中有效评估具有TA的加密设备的物理安全性。从理论上分析了TA的SR与不同参数值之间的精确关系，并在模拟和实际情况下通过实验验证了理论分析的正确性。然后，通过设置不同参数的值，可以准确有效地估计TA的SR。总体而言，此贡献可帮助评估人员在实践中有效评估具有TA的加密设备的物理安全性。