Secure and Efficient Software Masking on Superscalar Pipelined Processors

Gigerl, Barbara; Primas, Robert; Mangard, Stefan

doi:10.1007/978-3-030-92075-3_1

Cited by 9 publications

(4 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Many countermeasures, including masking [13][14][15], shuffling [16][17][18], randomized clock [19,20], random delay insertion [21][22][23], constant-weight encoding [24], and code polymorphism [25,26], are used to lessen side-channel assaults. By preventing information from leaking through physically quantifiable channels like time [27,28], power consump-tion [29,30], or electromagnetic radiation [31,32], these countermeasures seek to safeguard cryptographic systems.…”

Section: Of 13mentioning

confidence: 99%

Investigating CRYSTALS-Kyber Vulnerabilities: Attack Analysis and Mitigation

Iavich,

Kuchukhidze

2024

Cryptography

View full text Add to dashboard Cite

Significant advancements have been achieved in the field of quantum computing in recent years. If somebody ever creates a sufficiently strong quantum computer, many of the public-key cryptosystems in use today might be compromised. Kyber is a post-quantum encryption technique that depends on lattice problem hardness, and it was recently standardized. Despite extensive testing by the National Institute of Standards and Technology (NIST), new investigations have demonstrated the effectiveness of CRYSTALS-Kyber attacks and their applicability in non-controlled environments. We investigated CRYSTALS-Kyber’s susceptibility to side-channel attacks. In the reference implementation of Kyber512, additional functions can be compromised by employing the selected ciphertext. The implementation of the selected ciphertext allows the attacks to succeed. Real-time recovery of the entire secret key is possible for all assaults.

show abstract

Section: Of 13mentioning

confidence: 99%

Investigating CRYSTALS-Kyber Vulnerabilities: Attack Analysis and Mitigation

Iavich,

Kuchukhidze

2024

Cryptography

View full text Add to dashboard Cite

show abstract

“…Load-store Unit In addition to transition-based leakages during a load/store byte/word instruction, a multiplexer is used in order to output the wanted byte (or halfword) and -due to possible glitches in the multiplexer selector-bytes (or halfwords) within a word may also interact unintentionally [GPM21].…”

Section: Glitch Related Leakagementioning

confidence: 99%

Threshold Implementations in Software: Micro-architectural Leakages in Algorithms

Gaspoz

Dhooghe²

2023

TCHES

View full text Add to dashboard Cite

This paper provides necessary properties to algorithmically secure firstorder maskings in scalar micro-architectures. The security notions of threshold implementations are adapted following micro-processor leakage effects which are known to the literature. The resulting notions, which are based on the placement of shares, are applied to a two-share randomness-free PRESENT cipher and Keccak-f. The assembly implementations are put on a RISC-V and an ARM Cortex-M4 core. All designs are validated in the glitch and transition extended probing model and their implementations via practical lab analysis.

show abstract

“…Open-source tools for leakage verification include MAPS [LGD18] and COCO [Gig+21]. The former is exclusive for ARM Cortex M3 systems but is not cycle accurate.…”

Section: State Of the Artmentioning

confidence: 99%

Emulating Side Channel Attacks on gem5: lessons learned

Bossuet

Grosso

Lara-Nino

2023

2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

View full text Add to dashboard Cite

Side channel attacks (SCA) have the potential of disrupting the trust of the users on computing platforms and cryptographic algorithms. The main challenge in the design of countermeasures against such threats is that an evaluation of their effectiveness can only be performed after they have been implemented. By that point, significant resources would have been invested in the creation of a prototype. Moreover, the large volume of combinations from all the potential target algorithms and computing systems complicates a systematical analysis. It is necessary to find strategies to simplify and systematize the study of SCAs and their countermeasures. gem5 is a cycle-accurate simulator which offers the possibility to emulate a broad range of computing architectures. Beyond the functional verification, this tool computes multiple physical statistics from the simulated system. In this paper, we discuss the lessons learned from using gem5 to simulate SCAs on an ARM system. Our work shows that while there is a correlation between the data and the reported statistics, there are significant challenges that must be addressed to improve the use of gem5 for the emulation of physical phenomena.

show abstract

Secure and Efficient Software Masking on Superscalar Pipelined Processors

Cited by 9 publications

References 32 publications

Investigating CRYSTALS-Kyber Vulnerabilities: Attack Analysis and Mitigation

Investigating CRYSTALS-Kyber Vulnerabilities: Attack Analysis and Mitigation

Threshold Implementations in Software: Micro-architectural Leakages in Algorithms

Emulating Side Channel Attacks on gem5: lessons learned

Contact Info

Product

Resources

About