Hi, I’ve computed the signal to noise ration (SNR) for the hardware AES-128 (1 round per cycle implementation) both for the leakage model sbox_out and last_round_state_diff.
The result is the one shown in figure below and it left me perplexed.
I expected a better SNR of the last_round_state_diff than that of the sbox_out, in particular with a high spike on the last round.
Indeed, I’m able to recover easily the key with the last_round_state_diff but not with the sbox_out leakage model.
What am i missing ? Thanks in advance
For completeness the code i used to compute the snr is :
leak_model = cwa.leakage_models.sbox_output
snr_so = cwa.calculate_snr(project.traces, leak_model=leak_model, db=False)

