Probing Security through Input-Output Separation and Revisited Quasilinear Masking - Archive ouverte HAL
Article Dans Une Revue IACR Transactions on Cryptographic Hardware and Embedded Systems Année : 2021

Probing Security through Input-Output Separation and Revisited Quasilinear Masking

Dahmun Goudarzi
  • Fonction : Auteur
  • PersonId : 990298
Thomas Prest
  • Fonction : Auteur
Matthieu Rivain
  • Fonction : Auteur
  • PersonId : 1080676

Résumé

The probing security model is widely used to formally prove the security of masking schemes. Whenever a masked implementation can be proven secure in this model with a reasonable \emph{leakage rate}, it is also provably secure in a realistic leakage model known as the \emph{noisy leakage model}. This paper introduces a new framework for the composition of probing-secure circuits. We introduce the security notion of \emph{input-output separation} (IOS) for a refresh gadget. From this notion, one can easily compose gadgets satisfying the classical probing security notion --which does not ensure composability on its own-- to obtain a \emph{region probing secure} circuit. Such a circuit is secure against an adversary placing up to $t$ probes in each gadget composing the circuit, which ensures a tight reduction to the more realistic noisy leakage model. After introducing the notion and proving our composition theorem, we compare our approach to the composition approaches obtained with the (Strong) Non-Interference (S/NI) notions as well as the Probe-Isolating Non-Interference (PINI) notion. We further show that any uniform SNI gadget achieves the IOS security notion, while the converse is not true. We further describe a refresh gadget achieving the IOS property for any linear sharing with a quasilinear complexity $\Theta(n \log n)$ and a $O(1/\log n)$ leakage rate (for an $n$-size sharing). This refresh gadget is a simplified version of the quasilinear SNI refresh gadget proposed by Battistello, Coron, Prouff, and Zeitoun (ePrint~2016). As an application of our composition framework, we revisit the quasilinear-complexity masking scheme of Goudarzi, Joux and Rivain (Asiacrypt~2018). We improve this scheme by generalizing it to any base field (whereas the original proposal only applies to field with $n$th powers of unity) and by taking advantage of our composition approach. We further patch a flaw in the original security proof and extend it from the random probing model to the stronger region probing model. Finally, we present some application of this extended quasilinear masking scheme to AES and MiMC and compare the obtained performances.
Fichier non déposé

Dates et versions

hal-03209397 , version 1 (27-04-2021)

Identifiants

  • HAL Id : hal-03209397 , version 1

Citer

Dahmun Goudarzi, Thomas Prest, Matthieu Rivain, Damien Vergnaud. Probing Security through Input-Output Separation and Revisited Quasilinear Masking. IACR Transactions on Cryptographic Hardware and Embedded Systems, In press. ⟨hal-03209397⟩
130 Consultations
0 Téléchargements

Partager

More