BIKE Key-Recovery: Combining Power Consumption Analysis and Information-Set Decoding - Archive ouverte HAL
Communication Dans Un Congrès Année : 2023

BIKE Key-Recovery: Combining Power Consumption Analysis and Information-Set Decoding

Résumé

In this paper, we present a single-trace attack on a BIKE Cortex-M4 implementation proposed by Chen et al. at CHES 2021. BIKE is a key-encapsulation mechanism, candidate to the NIST post-quantum cryptography standardisation process. We attack by exploiting the rotation function that circularly shifts an array depending on the private key. Chen et al. implemented two versions of this function, one in C and one in assembly. Our attack uses subtraces clustering combined with a combinatorial attack to recover the full private key. We obtained a high clustering accuracy in our experiments, and we provide ways to deal with the errors. We are able to recover all the private keys for the C implementation, and while the assembly version is harder to attack using our technique, we still manage to reduce BIKE Level-1 security from 128 to 65 bits for a significant proportion of the private keys.
Fichier principal
Vignette du fichier
BIKE_ACNS_2023.pdf (2.82 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04166679 , version 1 (01-03-2024)

Licence

Identifiants

Citer

Agathe Cheriere, Nicolas Aragon, Tania Richmond, Benoît Gérard. BIKE Key-Recovery: Combining Power Consumption Analysis and Information-Set Decoding. ACNS 2023 - 21st International Conference on Applied Cryptography and Network Security, Jun 2023, Kyoto, Japan. pp.725-748, ⟨10.1007/978-3-031-33488-7_27⟩. ⟨hal-04166679⟩
168 Consultations
184 Téléchargements

Altmetric

Partager

More