Towards Optimized DFA Attacks on AES under Multibyte Random Fault Model

Table 2

The theoretical candidate numbers after each analysis in three fault models.

Analyses completed	1	2	3	4	5	6
Single-byte fault model	1020	0.00024	0	0	0	0
Two-byte fault model	389983	35	0.003	0	0	0
Three-byte fault model	66142496	1018594	15686	241	3.72	0.06