Give Me Your Binary, I'Ll Tell You If It Leaks

In this paper we present a method to identify side-channel information leakage of a cryptosystem software implementation, which is performed at the binary level, and needs only a debugger. Using a new resynchronisation method based on the control flow, leaking instructions are retrieved with only few traces and without leakage model. Advantageously this methodology is target agnostic, finding the side-channel leakages without the need to know how the software will be used.