Faulting original McEliece's implementations is possible - Archive ouverte HAL Access content directly
Conference Papers Year :

Faulting original McEliece's implementations is possible

Abstract

Private and public actors increasingly encounter use cases where they need to implement sensitive operations on mass-market peripherals for which they have little or no control. They are sometimes inclined to attempt this without using hardware-assisted equipment, such as secure elements. In this case, the white-box attack model is particularly relevant and includes access to every asset, retro-engineering, and binary instrumentation by attackers. At the same time, quantum attacks are becoming more and more of a threat and challenge traditional asymmetrical ciphers, which are treasured by private and public actors. The McEliece cryptosystem is a code-based public key algorithm introduced in 1978 that is not subject to wellknown quantum attacks and that could be implemented in an uncontrolled environment. During the NIST post-quantum cryptography standardization process [17], a derived candidate commonly refer to as classic McEliece was selected. This algorithm is however vulnerable to some fault injection attacks while a priori, this does not apply to the original McEliece. In this article, we thus focus on the original McEliece cryptosystem and we study its resilience against fault injection attacks on an ARM reference implementation [18]. We disclose the first fault injection based attack and we discuss on how to modify the original McEliece cryptosystem to make it resilient to fault injection attacks.
Fichier principal
Vignette du fichier
GiraudB23.pdf (320.44 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Licence : CC BY - Attribution

Dates and versions

hal-04089762 , version 1 (05-05-2023)

Licence

Attribution - CC BY 4.0

Identifiers

  • HAL Id : hal-04089762 , version 1

Cite

Vincent Giraud, Guillaume Bouffard. Faulting original McEliece's implementations is possible: How to mitigate this risk?. Workshop on the Security of Software/Hardware Interfaces, Guillaume Hiet; Jan Tobias Mühlberg, Jul 2023, Delft, Netherlands. ⟨hal-04089762⟩
0 View
2 Download

Share

Gmail Facebook Twitter LinkedIn More