Modified Transparency Order Property: Solution or Just Another Attempt

Picek, Stjepan; Mazumdar, Bodhisatwa; Mukhopadhyay, Debdeep; Batina, Lejla

doi:10.1007/978-3-319-24126-5_13

Cited by 19 publications

(5 citation statements)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Table 1 shows a low average value of MTO (6.71) in comparison with the values obtained in [17] (6.86) and in [14] (6.88). The average value of CCV is high as expected, given the correlation with the M T O 0 minimization, also higher than the value obtained in [7] We also define another variant of the objective function using the RTO property.…”

Section: A New Objective Function Based On Mtomentioning

confidence: 62%

Improved Objective Functions to Search for 8 × 8 Bijective S-Boxes With Theoretical Resistance Against Power Attacks Under Hamming Leakage Models

et al. 2022

View full text Add to dashboard Cite

Many research focuses on find S-boxes with good cryptographic properties applying a heuristic method and a balanced, objective function. The design of S-boxes with theoretical resistance against Side-Channel Attacks by power consumption is addressed with properties defined under one of these two models: the Hamming Distance leakage model and the Hamming Weight leakage model. As far as we know, a balanced search criterion that considers properties under both, at the same time, remains an open problem. We define two new optimal objective functions that can be used to obtain S-boxes with good cryptographic properties values, keeping high theoretical resistance for the two leakage models; we encourage using at least one of our objective functions. We apply a Hill Climbing heuristic method over the S-box's space to measure which objective function is better and to compare the obtained S-boxes with the S-boxes in the actual literature. We also confirm some key relationships between the properties and which property is more suitable to be used.

show abstract

Section: A New Objective Function Based On Mtomentioning

confidence: 62%

Improved Objective Functions to Search for 8 × 8 Bijective S-Boxes With Theoretical Resistance Against Power Attacks Under Hamming Leakage Models

et al. 2022

View full text Add to dashboard Cite

show abstract

“…Picek et al used GA to develop S-boxes resilient to side-channel attacks, using transparency order, modified transparency order, and confusion coefficient properties, as a countermeasure for such attacks [13], [19]. Picek et al presented in 2016 a new cost function for the evolution of bijective S-boxes with nonlinearity up to 104 [20].…”

Section: Introductionmentioning

confidence: 99%

Evolving Nonlinear S-Boxes With Improved Theoretical Resilience to Power Attacks

et al. 2020

View full text Add to dashboard Cite

Substitution boxes are the main nonlinear component of block ciphers. The security of these ciphers against linear, differential, or side-channel attacks is dependent on the design of such component and their intrinsic properties. There are several methods that aim to cryptographically define, generate, or search for strong substitution boxes. The application of combinatorial optimization algorithms is one of the most useful methodologies in this research area. In this paper, we present a novel hybrid method based on the Leaders and Followers and hill-climbing over Hamming Weight Classes metaheuristics, coupled with a new trade-off fitness function that generates 8-bit bijective substitution boxes with good resisting properties towards classical cryptanalysis and side-channel attacks by power consumption. We address the best Pareto optimal solutions for the multi-objective optimization of non-linearity and confusion coefficient variance.

show abstract

“…The motivation to select a bit at the output of the S-box arises from the goal of best distinguishing the correct key from others, which (as already mentioned) is also captured by the notion of confusion coefficient κ (recall (6)). It is now well known that the confusion coefficient is favorable to the attacker at the output of S-boxes [22], [47], [7], [23], [46], [10], [12].…”

Section: Positioning Of Our Work With Respect To the State-of-the-artmentioning

confidence: 99%

Intrinsic Resiliency of S-Boxes Against Side-Channel Attacks–Best and Worst Scenarios

Carlet

Chérisey

Guilley

et al. 2021

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

Constructing S-boxes that are inherently resistant against side-channel attacks is an important problem in cryptography. By using an optimal distinguisher under an additive Gaussian noise assumption, we clarify how a defender (resp., an attacker) can make side-channel attacks as difficult (resp., easy) as possible, in relation with the auto-correlation spectrum of Boolean functions. We then construct balanced Boolean functions that are optimal for each of these two scenarios. Generalizing the objectives for an S-box, we analyze the auto-correlation spectra of some well-known S-box constructions in dimensions at most 8 and compare their intrinsic resiliency against side-channel attacks. Finally, we perform several simulations of side-channel attacks against the aforementioned constructions, which confirm our theoretical approach.

show abstract

Modified Transparency Order Property: Solution or Just Another Attempt

Cited by 19 publications

References 28 publications

Improved Objective Functions to Search for 8 × 8 Bijective S-Boxes With Theoretical Resistance Against Power Attacks Under Hamming Leakage Models

Improved Objective Functions to Search for 8 × 8 Bijective S-Boxes With Theoretical Resistance Against Power Attacks Under Hamming Leakage Models

Evolving Nonlinear S-Boxes With Improved Theoretical Resilience to Power Attacks

Intrinsic Resiliency of S-Boxes Against Side-Channel Attacks–Best and Worst Scenarios

Contact Info

Product

Resources

About