<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01362552</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-22T16:48:39+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Using Modular Extension to Provably Protect Edwards Curves Against Fault Attacks</title>
            <author role="aut">
              <persName>
                <forename type="first">Margaux</forename>
                <surname>Dugardin</surname>
              </persName>
              <idno type="halauthorid">31142-0</idno>
              <affiliation ref="#struct-251992"/>
              <affiliation ref="#struct-300362"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sylvain</forename>
                <surname>Guilley</surname>
              </persName>
              <email type="md5">3db192aaab67dd0ad0c744fe106b82a7</email>
              <email type="domain">telecom-paristech.fr</email>
              <idno type="idhal" notation="string">sylvain-guilley</idno>
              <idno type="idhal" notation="numeric">16208</idno>
              <idno type="halauthorid" notation="string">32212-16208</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-5044-3534</idno>
              <idno type="IDREF">https://www.idref.fr/116845953</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-6118-7927</idno>
              <affiliation ref="#struct-300362"/>
              <affiliation ref="#struct-193057"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Martin</forename>
                <surname>Moreau</surname>
              </persName>
              <idno type="halauthorid">1057179-0</idno>
              <affiliation ref="#struct-193057"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Zakaria</forename>
                <surname>Najm</surname>
              </persName>
              <email type="md5">e40d9559f473c37ccac397ade64b8acc</email>
              <email type="domain">st.com</email>
              <idno type="idhal" notation="numeric">988698</idno>
              <idno type="halauthorid" notation="string">919187-988698</idno>
              <affiliation ref="#struct-19590"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Pablo</forename>
                <surname>Rauzy</surname>
              </persName>
              <idno type="halauthorid">734859-0</idno>
              <affiliation ref="#struct-203831"/>
              <affiliation ref="#struct-104738"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Margaux</forename>
                <surname>Dugardin</surname>
              </persName>
              <email type="md5">8ef35116dc8a64255f1b22e1ca106121</email>
              <email type="domain">telecom-paristech.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2016-09-09 09:50:14</date>
              <date type="whenWritten">2016-08</date>
              <date type="whenModified">2026-02-23 09:38:02</date>
              <date type="whenReleased">2016-09-09 14:31:09</date>
              <date type="whenProduced">2016-08-20</date>
              <date type="whenEndEmbargoed">2016-09-09</date>
              <ref type="file" target="https://hal.science/hal-01362552v1/document">
                <date notBefore="2016-09-09"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-01362552v1/file/PROOFS_2016_paper_1.pdf" id="file-1362552-1444847">
                <date notBefore="2016-09-09"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="433012">
                <persName>
                  <forename>Margaux</forename>
                  <surname>Dugardin</surname>
                </persName>
                <email type="md5">8ef35116dc8a64255f1b22e1ca106121</email>
                <email type="domain">telecom-paristech.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01362552</idno>
            <idno type="halUri">https://hal.science/hal-01362552</idno>
            <idno type="halBibtex">dugardin:hal-01362552</idno>
            <idno type="halRefHtml">&lt;i&gt;PROOFS: Security Proofs for Embedded Systems 2016&lt;/i&gt;, Aug 2016, San, United States</idno>
            <idno type="halRef">PROOFS: Security Proofs for Embedded Systems 2016, Aug 2016, San, United States</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-1362552-1444847"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-PARIS8" corresp="UNIV-PARIS-LUMIERES">Université Paris VIII Vincennes-Saint Denis</idno>
            <idno type="stamp" n="INSA-LYON">Institut National des Sciences Appliquées de Lyon</idno>
            <idno type="stamp" n="ENST">Ecole Nationale Supérieure des Télécommunications</idno>
            <idno type="stamp" n="TELECOM-PARISTECH" corresp="PARISTECH">Télécom Paris</idno>
            <idno type="stamp" n="PARISTECH">ParisTech</idno>
            <idno type="stamp" n="LIASD" corresp="UNIV-PARIS8">Laboratoire d'Intelligence Artificielle et Sémantique des Données</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="TELECOM-PARISTECH-SACLAY" corresp="PARISTECH">TELECOM-PARISTECH-SACLAY</idno>
            <idno type="stamp" n="CITI" corresp="INSA-LYON">Centre of Innovation in Telecommunications and Integration of services</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="LTCI" corresp="TELECOM-PARISTECH">Laboratoire Traitement et Communication de l'Information</idno>
            <idno type="stamp" n="COMELEC" corresp="TELECOM-PARISTECH">Département Communications et Electronique</idno>
            <idno type="stamp" n="SSH" corresp="TELECOM-PARISTECH">Equipe Secure and Safe Hardware</idno>
            <idno type="stamp" n="UNIV-PARIS-LUMIERES"/>
            <idno type="stamp" n="UDL">UDL</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="UNIV-PARIS8-OA" corresp="UNIV-PARIS8">HAL UNIV-PARIS8 - open access</idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="0">No</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Using Modular Extension to Provably Protect Edwards Curves Against Fault Attacks</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Margaux</forename>
                    <surname>Dugardin</surname>
                  </persName>
                  <idno type="halauthorid">31142-0</idno>
                  <affiliation ref="#struct-251992"/>
                  <affiliation ref="#struct-300362"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sylvain</forename>
                    <surname>Guilley</surname>
                  </persName>
                  <email type="md5">3db192aaab67dd0ad0c744fe106b82a7</email>
                  <email type="domain">telecom-paristech.fr</email>
                  <idno type="idhal" notation="string">sylvain-guilley</idno>
                  <idno type="idhal" notation="numeric">16208</idno>
                  <idno type="halauthorid" notation="string">32212-16208</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-5044-3534</idno>
                  <idno type="IDREF">https://www.idref.fr/116845953</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-6118-7927</idno>
                  <affiliation ref="#struct-300362"/>
                  <affiliation ref="#struct-193057"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Martin</forename>
                    <surname>Moreau</surname>
                  </persName>
                  <idno type="halauthorid">1057179-0</idno>
                  <affiliation ref="#struct-193057"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Zakaria</forename>
                    <surname>Najm</surname>
                  </persName>
                  <email type="md5">e40d9559f473c37ccac397ade64b8acc</email>
                  <email type="domain">st.com</email>
                  <idno type="idhal" notation="numeric">988698</idno>
                  <idno type="halauthorid" notation="string">919187-988698</idno>
                  <affiliation ref="#struct-19590"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Pablo</forename>
                    <surname>Rauzy</surname>
                  </persName>
                  <idno type="halauthorid">734859-0</idno>
                  <affiliation ref="#struct-203831"/>
                  <affiliation ref="#struct-104738"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>PROOFS: Security Proofs for Embedded Systems 2016</title>
                  <date type="start">2016-08-20</date>
                  <date type="end">2016-08-20</date>
                  <settlement>San</settlement>
                  <country key="US">United States</country>
                </meeting>
                <imprint/>
              </monogr>
              <ref type="publisher">http://www.proofs-workshop.org/</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Edwards curves</term>
                <term xml:lang="en">elliptic curve cryptography</term>
                <term xml:lang="en">asymmetric cryptography</term>
                <term xml:lang="en">modular extension</term>
                <term xml:lang="en">fault injection attack</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Fault injection attacks are a real-world threat to cryptosystems, in particular asymmetric cryptography. In this paper, we focus on countermeasures which guarantee the integrity of the computation result, hence covering most existing and future fault attacks. Namely, we study the modular extension protection scheme in previously existing and newly contributed variants of the countermeasure on elliptic curve scalar multiplication (ECSM) algorithms. We find that an existing countermeasure is incorrect and we propose new " test-free " variant of the modular extension scheme that fixes it. We then formally prove the correctness and security of modular extension: specifically, the fault non-detection probability is inversely proportional to the security parameter. Finally, we implement an ECSM protected with test-free modular extension during the elliptic curve operation to evaluate the efficient of this method on Edwards and twisted Edwards curves.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-251992" status="VALID">
          <orgName>THALES COMMUNICATIONS &amp; SECURITY</orgName>
          <desc>
            <address>
              <addrLine>4 avenue de Louvresses Gennevilliers</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.thalesgroup.com/en/content/thales-communications-security</ref>
          </desc>
          <listRelation>
            <relation active="#struct-250969" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300362" status="VALID">
          <idno type="ROR">https://ror.org/01naq7912</idno>
          <orgName>Télécom ParisTech</orgName>
          <date type="start">2008-01-01</date>
          <date type="end">2019-06-11</date>
          <desc>
            <address>
              <addrLine>46 rue Barrault 75634 Paris Cedex 13</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-193057" status="VALID">
          <orgName>Secure-IC S.A.S</orgName>
          <desc>
            <address>
              <addrLine>80 avenue des Buttes de Coësmes, 35700 Rennes - (Tel. +33 2 99 12 18 72)</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.secure-ic.com/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-19590" status="VALID">
          <orgName>STMicroelectronics [Rousset]</orgName>
          <orgName type="acronym">ST-ROUSSET</orgName>
          <desc>
            <address>
              <addrLine>ZI de Peynier Rousset, avenue Celestin Coq - 13790 Rousset</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.st.com/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-203831" status="VALID">
          <orgName>CITI Centre of Innovation in Telecommunications and Integration of services</orgName>
          <orgName type="acronym">CITI</orgName>
          <desc>
            <address>
              <addrLine>CITI Laboratory, INSA Lyon Domaine Scientifique de la Doua Batiment Claude Chappe 6 avenue des Arts 69621 Villeurbanne Cedex Phone +33 4 7243 6415 Fax +33 4 7243 6227 E-Mail citi@insa-lyon.fr</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.citi.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-219748" type="direct"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-104738" status="OLD">
          <idno type="RNSR">200918461G</idno>
          <orgName>Laboratoire d'Informatique Avancée de Saint-Denis</orgName>
          <orgName type="acronym">LIASD</orgName>
          <date type="start">2009-01-01</date>
          <desc>
            <address>
              <addrLine>Université Paris 8 Vincennes-Saint-Denis - 2 rue de la Liberté - 93526 Saint-Denis cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ai.univ-paris8.fr</ref>
          </desc>
          <listRelation>
            <relation name="EA4383" active="#struct-11141" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-250969" status="VALID">
          <orgName>THALES [France]</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.thalesgroup.com/fr/europe/france</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-219748" status="VALID">
          <idno type="IdRef">052444724</idno>
          <idno type="ISNI">0000 0001 2292 0228</idno>
          <orgName>Institut National des Sciences Appliquées de Lyon</orgName>
          <orgName type="acronym">INSA Lyon</orgName>
          <date type="start">1957-03-18</date>
          <desc>
            <address>
              <addrLine>20 Avenue Albert Einstein, 69621 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
            <relation active="#struct-301232" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301088" status="VALID">
          <idno type="ROR">https://ror.org/01rk35k63</idno>
          <orgName>Université de Lyon</orgName>
          <desc>
            <address>
              <addrLine>92 rue Pasteur - CS 30122, 69361 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-lyon.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-11141" status="VALID">
          <idno type="IdRef">026403552</idno>
          <idno type="ISNI">0000000121083026</idno>
          <idno type="ROR">https://ror.org/04wez5e68</idno>
          <orgName>Université Paris 8</orgName>
          <orgName type="acronym">UP8</orgName>
          <date type="start">1971-01-01</date>
          <desc>
            <address>
              <addrLine>2 rue de la Liberté - 93526 Saint-Denis cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-paris8.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>