Beyond Birthday Bound Secure Fresh Rekeying: Application to Authenticated Encryption

Mennink, Bart

doi:10.1007/978-3-030-64837-4_21

Cited by 12 publications

(11 citation statements)

References 73 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These attacks, known as side-channel attacks (SCAs), are especially harmful when chips containing private data are in an adversary's hands or installed in locations where the general public can access them. Smart cards, sensor network nodes, and IoT devices are vulnerable [14], [15]. SCAs can be avoided using several strategies, such as masking [15][16][17] and hiding [18] [27,28,29,30].…”

Section: A Backgroundmentioning

confidence: 99%

“…Smart cards, sensor network nodes, and IoT devices are vulnerable [14], [15]. SCAs can be avoided using several strategies, such as masking [15][16][17] and hiding [18] [27,28,29,30]. However, rekeying [15,19,20], which uses the target cipher plus a subkey generation algorithm that accepts the master key as input, is a less expensive method of obtaining resistance against side-channel attacks.…”

Section: A Backgroundmentioning

confidence: 99%

“…When cryptographic equipment is mounted in a location where attackers can physically reach it, SCAs are more dangerous. Therefore, many sources in the literature advocated several countermeasures against SCAs, such as masking [15][16][17]51] and hiding [18]. However, these solutions come with unsustainable performance costs in situations with limited resources, like IoT devices and smart cards.…”

Section: Related Workmentioning

confidence: 99%

“…The parallel rekeying function creates session keys for use in the AE schemes' encryption component using an initial master key [15,20]. This method enables us to encrypt more data under the same key, increasing the key's lifetime.…”

Section: A Security Of Parallel Fresh Rekeying Function (G)mentioning

confidence: 99%

See 3 more Smart Citations

Sponge-Based Parallel Authenticated Encryption With Variable Tag Length and Side-Channel Protection

et al. 2023

View full text Add to dashboard Cite

Authenticated Encryption (AE) protects confidentiality and integrity at the same time. The sponge construction is based on an iterated permutation or transformation that can be used to implement hashing, and AE schemes, among others. Sponge-based AE schemes offer desirable characteristics like parallelizability and incrementality. In addition, they provide security features such as protection against Chosen Plaintext Attacks, Chosen-Ciphertext Attacks, and Side-Channel Attacks (SCAs). Traditionally AE schemes assume the tag length, also called the stretch, as a fixed parameter per key, and the security is proved according to that assumption. However, the variable tag length per key could happen due to misconfiguration or misuse. In that case, the security would be violated, so it is vital to accommodate variable tag length without sacrificing other desirable features. Reyhanitabar et al. proposed Key Equivalent Separation by Stretch feature and concretized it for protection against tag length misuse attacks in block cipher-based AE schemes. However, the problem remains unresolved for sponge-based constructions, where current sponge-based schemes are vulnerable to tag length variation under the same key attacks. This work aims to bridge this gap by proposing a parallel, sponge-based AE scheme with a variable tag length per key that protects against SCAs and suggesting a lower bound for the recommended tag length. Finally, the security of the proposed scheme is discussed, and its performance is analyzed after implementing the proposed AE scheme in the C programming language.

show abstract

Section: A Backgroundmentioning

confidence: 99%

Section: A Backgroundmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: A Security Of Parallel Fresh Rekeying Function (G)mentioning

confidence: 99%

See 2 more Smart Citations

Sponge-Based Parallel Authenticated Encryption With Variable Tag Length and Side-Channel Protection

et al. 2023

View full text Add to dashboard Cite

show abstract

“…Apart from analyzing an AE scheme under security models mentioned in previous sections, attacks exist where the adversary does take advantage of weaknesses in the cryptographic algorithms but takes advantage of sideline information from its implementation instead. Such attacks, known as Side-Channel Attacks(SCA), are particularly dangerous when chips with sensitive information are in the hands of an adversary or are deployed where they are accessible to the general public, like IoT devices, sensor network nodes, and smarts cards [77], [78]. AE schemes use several techniques to prevent side-channel attacks include hiding [79] and masking [78,80,81] and re-keying [78,82,83], in which we do not use the target cipher only but also a session generation function that uses the master key as input on top of it.…”

Section: Protection Against Side-channel Attacksmentioning

confidence: 99%

Authenticated Encryption Schemes: A Systematic Review

et al. 2022

View full text Add to dashboard Cite

Authenticated encryption (AE) is a cryptographic construction that simultaneously protects confidentiality and integrity. A considerable amount of research has been devoted to the area since its formal inception in 2000. Different lines of research have been proposed to enhance the available schemes in terms of security, efficiency, and design and to implement new ideas. However, a comprehensive systematic literature review (SLR) of the topic has not been provided to the best of the authors' knowledge. This study fills this gap in the literature by proposing a framework for classifying AE schemes and highlighting past contributions to help researchers familiarize themselves with the current state and directions for future research in the area. This SLR covered AE schemes proposed from 2000 to 2020. A total of 217 articles, selected from eight sources, were categorized into independent schemes, CAESAR competition schemes, and NIST lightweight competition schemes. These schemes were then classified according to their design approaches, security-related properties, and functional features. Our analysis reveals that a significant outstanding challenge in AE is to balance security, efficiency, and the provision of desirable features.

show abstract