[Resource Topic] 2018/1092: Shuffle and Mix: On the Diffusion of Randomness in Threshold Implementations of Keccak

Welcome to the resource topic for 2018/1092

Title:
Shuffle and Mix: On the Diffusion of Randomness in Threshold Implementations of Keccak

Authors: Felix Wegener, Christian Baiker, Amir Moradi

Abstract:

Threshold Implementations are well-known as a provably firstorder secure Boolean masking scheme even in the presence of glitches. A precondition for their security proof is a uniform input distribution at each round function, which may require an injection of fresh randomness or an increase in the number of shares. However, it is unclear whether violating the uniformity assumption causes exploitable leakage in practice. Recently, Daemen undertook a theoretical study of lossy mappings to extend the understanding of uniformity violations. We complement his work by entropy simulations and practical measurements of Keccak’s round function. Our findings shed light on the necessity of mixing operations in addition to bit-permutations in a cipher’s linear layer to propagate randomness between S-boxes and prevent exploitable leakage. Finally, we argue that this result cannot be obtained by current simulation methods, further stressing the continued need for practical leakage measurements.

ePrint: https://eprint.iacr.org/2018/1092

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .