[Resource Topic] 2020/993: Cryptanalysis of Masked Ciphers: A not so Random Idea

Welcome to the resource topic for 2020/993

Title:
Cryptanalysis of Masked Ciphers: A not so Random Idea

Authors: Tim Beyne, Siemen Dhooghe, Zhenda Zhang

Abstract:

A new approach to the security analysis of hardware-oriented masked ciphers against second-order side-channel attacks is developed. By relying on techniques from symmetric-key cryptanalysis, concrete security bounds are obtained in a variant of the probing model that allows the adversary to make only a bounded, but possibly very large, number of measurements. Specifically, it is formally shown how a bounded-query variant of robust probing security can be reduced to the linear cryptanalysis of masked ciphers. As a result, the compositional issues of higher-order threshold implementations can be overcome without relying on fresh randomness. From a practical point of view, the aforementioned approach makes it possible to transfer many of the desirable properties of first-order threshold implementations, such as their low randomness usage, to the second-order setting. For example, a straightforward application to the block cipher LED results in a masking using less than 700 random bits including the initial sharing. In addition, the cryptanalytic approach introduced in this paper provides additional insight into the design of masked ciphers and allows for a quantifiable trade-off between security and performance.

ePrint: https://eprint.iacr.org/2020/993

Talk: https://www.youtube.com/watch?v=7evR7Wi5RW0

Slides: https://iacr.org/submit/files/slides/2020/asiacrypt/ac2020/290/slides.pdf

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .