A secure white-box SM4 implementation

Bai, Kunpeng; Wu, Changchun

doi:10.1002/sec.1394

Cited by 23 publications

(5 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In 2014, Luo et al [10] improved on Xiao et al's white-box AES using nonlinear encoding. In 2016, Bai et al [11] proposed a white-box implementation of the SM4 algorithm (denoted as Bai-Wu SM4 white-box scheme) using the same construction of lookup tables. To improve efficiency, the Bai-Wu SM4 white-box scheme uses two types of lookup tables: one to perform output decoding and encoding of new inputs, and the other to compute the wheel function of the standard SM4 algorithm.…”

Section: Realated Workmentioning

confidence: 99%

SPN-AS: A new white-box cryptographic algorithm based on AS iteration structure

Yang

Zhai

Dong

2023

Preprint

View full text Add to dashboard Cite

The attacker in white-box model has full access to software implementation of a cryptographic algorithm and full control over its execution environment. In order to solve the issues of high storage cost and inadequate security about most current white-box cryptographic schemes, SPN-AS, a novel white-box block cipher based on AS iterative structure is proposed. This scheme utilizes the AS iterative structure to construct a lookup table with a five-layer ASASA structure, and the maximum distance separable matrix is used as a linear layer to achieve complete diffusion in a small number of rounds. Attackers can be prevented from recovering the key under black-box model. The length of nonlinear layer S and affine layer A in lookup table is 16 bits, which effectively avoids decomposition attack against the ASASA structure and makes the algorithm possess anti-key extraction security under the white-box model, while SPN-AS possesses weak white-box (32KB, 112)-space hardness to satisfy anti-code lifting security. SPN-AS has provable security and better storage cost than existing schemes, with the same anti-key extraction security and anti-code lifting security, only 128KB of memory space is required in SPN-AS, which is only 14% of SPACE-16 algorithm and 33% of Yoroi-16 algorithm.

show abstract

Section: Realated Workmentioning

confidence: 99%

SPN-AS: A new white-box cryptographic algorithm based on AS iteration structure

Yang

Zhai

Dong

2023

Preprint

View full text Add to dashboard Cite

show abstract

“…Bai and Wu 27 proposed a protected white‐box SM4 execution to secure large linear encodings from canceling. Speed, memory, attacks such as BGE, MGH was the performance measures that are evaluated in this approach.…”

Section: Recent Related Work: a Reviewmentioning

confidence: 99%

Enhanced moth flame optimization based Supervision Kernel Entropy Component Analysis for high‐speed encrypted transmission model

Babu¹,

Kumar²

2021

Int J Communication

View full text Add to dashboard Cite

show abstract

“…They demonstrated that the worst-case time complexity to obtain the key of the Xiao-Lai scheme was O 2 47 . In 2016, Bai et al [12] employed more complicated encodings and larger tables to prevent the cancellation of higher-order linear encodings through combinatorial lookup tables, and proposed the Bai-Wu scheme. The scheme runs nine times faster than the Xiao-Lai scheme but requires 32.5 MB of memory for storing lookup tables.…”

Section: Introductionmentioning

confidence: 99%

An Efficient Masked White-Box Implementation of SM4

Zhao,

Wang,

et al. 2024

Electronics

View full text Add to dashboard Cite

Differential computation analysis (DCA) is a powerful method for extracting secret information from carefully designed white-box schemes without reverse engineering. Consequently, white-box solutions typically require substantial storage and computing resources to withstand DCAs, as demonstrated by the schemes proposed by Zhang et al. and Yuan et al. for the ISO/IEC standard algorithm SM4. Our approach employs Boolean masking to obscure the correlation between the key and intermediate states. Additionally, we introduce nonlinear permutations to reuse random mask values, thereby reducing space consumption. Experimental results indicate that DCAs against both the simplified version and the algebraic enhancement version of our scheme fail to retrieve the correct keys. Moreover, the former version can be implemented with approximately 1.62 MB of memory and the latter with 7.8 MB, which is much less than 24.3 MB (Zhang et al.) and 34.5 MB (Yuan et al.). Consequently, our design can thwart first-order DCA with lower overhead.

show abstract

A secure white-box SM4 implementation

Cited by 23 publications

References 14 publications

SPN-AS: A new white-box cryptographic algorithm based on AS iteration structure

SPN-AS: A new white-box cryptographic algorithm based on AS iteration structure

Enhanced moth flame optimization based Supervision Kernel Entropy Component Analysis for high‐speed encrypted transmission model

An Efficient Masked White-Box Implementation of SM4

Contact Info

Product

Resources

About