[Resource Topic] 2021/850: Resistance of Isogeny-Based Cryptographic Implementations to a Fault Attack

Welcome to the resource topic for 2021/850

Title:
Resistance of Isogeny-Based Cryptographic Implementations to a Fault Attack

Authors: Élise Tasso, Luca De Feo, Nadia El Mrabet, Simon Pontié

Abstract:

The threat of quantum computers has sparked the development of a new kind of cryptography to resist their attacks. Isogenies between elliptic curves are one of the tools used for such cryptosystems. They are championed by SIKE (Supersingular isogeny key encapsulation), an “alternate candidate” of the third round of the NIST Post-Quantum Cryptography Standardization Process. While all candidates are believed to be mathematically secure, their implementations may be vulnerable to hardware attacks. In this work we investigate for the first time whether Ti’s 2017 theoretical fault injection attack is exploitable in practice. We also examine suitable countermeasures. We manage to recover the secret thanks to electromagnetic fault injection on an ARM Cortex A53 using a correct and an altered public key generation. Moreover we propose a suitable countermeasure to detect faults that has a low overhead as it takes advantage of a redundancy already present in SIKE implementations.

ePrint: https://eprint.iacr.org/2021/850

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .