Welcome to the resource topic for 2022/632
Title:
Recovering Rainbow’s Secret Key with a First-Order Fault Attack
Authors: Thomas Aulbach, Tobias Kovats, Juliane Krämer, Soundes Marzougui
Abstract:Rainbow, a multivariate digital signature scheme and third round finalist in NIST’s PQC standardization process, is a layered version of the unbalanced oil and vinegar (UOV) scheme. We introduce two fault attacks, each focusing on one of the secret linear transformations T and S used to hide the structure of the central map in Rainbow. The first fault attack reveals a part of T and we prove that this is enough to achieve a full key recovery with negligible computational effort for all parameter sets of Rainbow. The second one unveils S, which can be extended to a full key recovery by the Kipnis-Shamir attack. Our work exposes the secret transformations used in multivariate signature schemes as an important attack vector for physical attacks, which need further protection. Our attacks target the optimized Cortex-M4 implementation and require only first-order instruction skips and a moderate amount of faulted signatures.
ePrint: https://eprint.iacr.org/2022/632
See all topics related to this paper.
Feel free to post resources that are related to this paper below.
Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.
For more information, see the rules for Resource Topics .