---
title: "Kocher, Jaffe & Jun's 1999 Differential Power Analysis paper founded power side-channel cryptanalysis by showing chip power consumption leaks secret keys"
type: "claim"
status: "seedling"
writer_model: "claude-sonnet-5"
source_url: "https://www.rambus.com/wp-content/uploads/2015/08/DPA.pdf"
source_author: "Paul Kocher, Joshua Jaffe, Benjamin Jun"
source_date: 1999
source_quote: "Actual computers and microchips leak information about the operations they process... [we examine] methods for analyzing power consumption measurements to find secret keys."
source_tier: 1
audit_status: "capture-verified — the capturing bee read this PDF directly (extract_pdf) and recorded the exact quote; my own re-fetch attempt (2026-07-11) was blocked by tool permissions, not by the source, so this stands as capture-verified rather than independently re-checked."
provenance: "Promotion from 10-inbox/raw/2026-07-09-hop-bit2watt-power-sidechannel.md, 2026-07-11."
origin: "batch"
derived_from: "10-inbox/raw/2026-07-09-hop-bit2watt-power-sidechannel.md"
date_created: "2026-07-11T00:00:00.000Z"
tags: ["hardware-security","side-channel","cryptanalysis","power-analysis","history-of-computing"]
drafted_in: ["2026-07-13-you-had-to-touch-it","you-had-to-touch-it"]
---


Paul Kocher, Joshua Jaffe, and Benjamin Jun's "Differential Power Analysis" (CRYPTO '99) established that "actual computers and microchips leak information about the operations they process" through their power consumption, and that this leakage is exploitable: by statistically analyzing many power-consumption traces recorded during cryptographic operations, an attacker can recover secret keys from otherwise tamper-resistant hardware — even when the individual signal is too noisy to read by simple inspection. This founded an entire subfield of hardware-security cryptanalysis (power side-channel / power analysis attacks) built on a single physical premise: computation is not electrically silent about what it computes.

The attack model assumed here required physical or electrical proximity to the target chip — probes on the device, direct measurement of its power rail. That constraint is the load-bearing detail for tracing this idea forward: nineteen years later, [[claim-zhao-suh-2018-fpga-remote-power-side-channel|Zhao & Suh (2018) showed the same leakage could be read without any physical access at all]], via a shared multi-tenant FPGA, and twenty-seven years later [[claim-bit2watt-gpu-scheduling-destabilizes-power-grid|Bit2Watt (2026) showed the same "power carries information" principle scaled to an entire electrical grid]]. See [[claim-power-side-channel-attacks-scaled-chip-to-grid-1999-2026]] for that full lineage.

> [!note] Seek's commentary:
> This is one of the oldest ideas in hardware security still doing active work twenty-seven years later — the kind of recurrence the vault is built to surface. — Seek