A Hybrid Approach to Formal Verification of Higher-Order Masked Arithmetic Programs

Gao, Pengfei; Xie, Hong; Song, Fu; Chen, Taolue

doi:10.1145/3428015

Cited by 8 publications

(2 citation statements)

References 123 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Finally, we remark that the leakage model considered in this work is different from the ones used in power side-channel security [16][17][18][19]45] and timing side-channel security [11,30,36,42] which leverage side-channel information while ours assumes that the adversary is able to observe all the public information during computation.…”

Section: Information-flow Analysismentioning

confidence: 99%

PoS4MPC: Automated Security Policy Synthesis for Secure Multi-party Computation

Fan

Song

Chen

et al. 2022

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Secure multi-party computation (MPC) is a promising technique for privacy-persevering applications. A number of MPC frameworks have been proposed to reduce the burden of designing customized protocols, allowing non-experts to quickly develop and deploy MPC applications. To improve performance, recent MPC frameworks allow users to declare variables secret only for these which are to be protected. However, in practice, it is usually highly non-trivial for non-experts to specify secret variables: declaring too many degrades the performance while declaring too less compromises privacy. To address this problem, in this work we propose an automated security policy synthesis approach to declare as few secret variables as possible but without compromising security. Our approach is a synergistic integration of type inference and symbolic reasoning. The former is able to quickly infer a sound—but sometimes conservative—security policy, whereas the latter allows to identify secret variables in a security policy that can be declassified in a precise manner. Moreover, the results from symbolic reasoning are fed back to type inference to refine the security types even further. We implement our approach in a new tool PoS4MPC. Experimental results on five typical MPC applications confirm the efficacy of our approach.

show abstract

Section: Information-flow Analysismentioning

confidence: 99%

PoS4MPC: Automated Security Policy Synthesis for Secure Multi-party Computation

Fan

Song

Chen

et al. 2022

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…This tool was extended in CheckMask [55] which utilizes more in-depth details. Its concept was also further researched in [88].…”

Section: Verification Of Hardware and Software Implementationsmentioning

confidence: 99%

Circuit Masking: From Theory to Standardization, A Comprehensive Survey for Hardware Security Researchers and Practitioners

Covic,

Ganji,

Forte

2021

Preprint

View full text Add to dashboard Cite

Side-channel attacks extracting sensitive data from implementations have been considered a major threat to the security of cryptographic schemes. This has elevated the need for improved designs by embodying countermeasures, with masking being the most prominent example. To formally verify the security of a masking scheme, numerous attack models have been developed to capture the physical properties of the information leakage as well as the capabilities of the adversary. With regard to these models, extensive research has been performed to realize masking schemes. These research efforts have led to significant progress in the development of security assessment methodologies and further initiated standardization activities. However, since the majority of this work is theoretical, it is challenging for the more practice-oriented hardware security community to fully grasp and contribute to. To bridge the gap, these advancements are reviewed and discussed in this survey, mainly from the perspective of hardware security. In doing so, a clear taxonomy is provided that is helpful for a systematic treatment of the masking-related topics. By giving an extensive overview of the existing methods, this survey (1) provides a research landscape of circuit masking for newcomers to the field, (2) offers guidelines on which attack model and verification tool to choose when designing masking schemes, and (3) identifies interesting new research directions where masking models and assessment tools can be applied. Thus, this survey serves as an essential reference for hardware security practitioners interested in the theory behind masking techniques, the tools useful to verify the security of masked circuits, and their potential applications.

show abstract

Automated Verification of Correctness for Masked Arithmetic Programs

Song

Chen

2023

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Masking is a widely-used effective countermeasure against power side-channel attacks for implementing cryptographic algorithms. Surprisingly, few formal verification techniques have addressed a fundamental question, i.e., whether the masked program and the original (unmasked) cryptographic algorithm are functional equivalent. In this paper, we study this problem for masked arithmetic programs over Galois fields of characteristic 2. We propose an automated approach based on term rewriting, aided by random testing and SMT solving. The overall approach is sound, and complete under certain conditions which do meet in practice. We implement the approach as a new tool and carry out extensive experiments on various benchmarks. The results confirm the effectiveness, efficiency and scalability of our approach. Almost all the benchmarks can be proved for the first time by the term rewriting system solely. In particular, detects a new flaw in a masked implementation published in EUROCRYPT 2017.

show abstract

A Hybrid Approach to Formal Verification of Higher-Order Masked Arithmetic Programs

Cited by 8 publications

References 123 publications

PoS4MPC: Automated Security Policy Synthesis for Secure Multi-party Computation

PoS4MPC: Automated Security Policy Synthesis for Secure Multi-party Computation

Circuit Masking: From Theory to Standardization, A Comprehensive Survey for Hardware Security Researchers and Practitioners

Automated Verification of Correctness for Masked Arithmetic Programs

Contact Info

Product

Resources

About