Towards Optimized DFA Attacks on AES under Multibyte Random Fault Model

Figure 1

The possible situations that can identify the key within 6 pairs of ciphertexts [10].