Linear Repairing Codes and Side-Channel Attacks - Archive ouverte HAL Access content directly
Journal Articles IACR Transactions on Cryptographic Hardware and Embedded Systems Year : 2018

Linear Repairing Codes and Side-Channel Attacks

Hervé Chabanne
  • Function : Author
  • PersonId : 1039812
Houssem Maghrebi
  • Function : Author
  • PersonId : 865259


To strengthen the resistance of countermeasures based on secret sharing, several works have suggested to use the scheme introduced by Shamir in 1978, which proposes to use the evaluation of a random d-degree polynomial into n d+1 public points to share the sensitive data. Applying the same principles used against the classical Boolean sharing, all these works have assumed that the most efficient attack strategy was to exploit the minimum number of shares required to rebuild the sensitive value; which is d + 1 if the reconstruction is made with Lagrange's interpolation. In this paper, we highlight first an important difference between Boolean and Shamir's sharings which implies that, for some signal-to-noise ratio, it is more advantageous for the adversary to observe strictly more than d + 1 shares. We argue that this difference is related to the existence of so-called exact linear repairing codes, which themselves come with reconstruction formulae that need (much) less information (counted in bits) than Lagrange's interpolation. In particular, this result implies that, contrary to what was believed, the choice of the public points in Shamir's sharing has an impact on the countermeasure strength. As another contribution, we exhibit a positive impact of the existence of linear exact repairing schemes; we indeed propose to use them to improve the state-of-the-art multiplication algorithms dedicated to Shamir's sharing. We argue that the improvement can be effective when the multiplication operation in the base field is at least two times smaller than in its sub-fields.
Fichier principal
Vignette du fichier
2017-918.pdf (1023.46 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01973360 , version 1 (08-01-2019)



Hervé Chabanne, Houssem Maghrebi, Emmanuel Prouff. Linear Repairing Codes and Side-Channel Attacks. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018, 2018 (1), pp.118-141. ⟨10.13154/tches.v2018.i1.118-141⟩. ⟨hal-01973360⟩
50 View
62 Download



Gmail Facebook X LinkedIn More