Side-Channel Indistinguishability - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2013

Side-Channel Indistinguishability

Résumé

We introduce a masking strategy for hardware that prevents any side-channel attacker from recovering uniquely the secret key of a cryptographic device. In this masking scheme, termed homomorphic, the sensitive data is exclusive-ored with a random value that belongs to a given set. We show that if this masking set is concealed, then no information about the cryptographic key leaks. If the masking set is public (or disclosed), then any (high-order) attack reveals a group of equiprobable keys. Those results are applied to the case of the AES, where sensitive variables are bytes. To any mask corresponds a masked substitution box. We prove that there exists a homomorphic masking with $16$ masks (hence a number of substitution boxes equal to that of the same algorithm without masking) that resists mono-variate first-, second-, and third-order side-channel attacks. Furthermore, even if the masking set is public, each byte of the correct key is found only ex aequo with $15$ incorrect ones, making the side-channel analysis insufficient alone -- the remaining key space shall be explored by other means (typically exhaustive search). Thus, our homomorphic masking strategy allows both to increase the number of side-channel measurements and to demand for a final non negligible brute-forcing (of complexity $16^{N_B}=2^{64}$ for AES, that has $N_B=16$ substitution boxes). The hardware implementation of the Rotating Substitution boxes Masking (RSM) is a practical instantiation of our homomorphic masking countermeasure.
Fichier principal
Vignette du fichier
rsm_hocpa.pdf (928.91 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00826618 , version 1 (28-05-2013)
hal-00826618 , version 2 (30-06-2013)
hal-00826618 , version 3 (13-08-2013)
hal-00826618 , version 4 (06-01-2014)
hal-00826618 , version 5 (19-07-2014)
hal-00826618 , version 6 (25-01-2016)

Identifiants

Citer

Claude Carlet, Sylvain Guilley. Side-Channel Indistinguishability. HASP, Jun 2013, Tel Aviv, Israel. pp.9:1-9:8, ⟨10.1145/2487726.2487735⟩. ⟨hal-00826618v6⟩
557 Consultations
615 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More