Practical two-dimensional correlation power analysis and its backward fault-tolerance

Side-channel analysis was introduced by Kocher et al. [1, 2] which marked the outbreak of this new research field in the applied cryptography area. Subsequently, many side-channel analysis methods have been published, for example, correlation power analysis (CPA) [3], template attack [4], collision attack [5,6], mutual information analysis [7] and so on, among which CPA is most widely applied in practical attacks.