Algebraic Fault Analysis of SHA-3 Under Relaxed Fault Models

Luo, Pei; Athanasiou, Konstantinos; Fei, Yunsi; Wahl, Thomas

doi:10.1109/tifs.2018.2790938

Cited by 16 publications

(17 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…First, we investigate how well is GA able to find faults (i.e., force the algorithm to output the wrong ciphertext) and then, whether such points can be used in order to obtain the state of the algorithm. For this purpose, we use algebraic fault analysis (AFA), as described in [17]. AFA eliminates the need for analysis of fault propagation as it is needed in differential fault analysis; instead, it uses a SAT solver to recover the state bits from a (clean output, faulty output) pair.…”

Section: Resultsmentioning

confidence: 99%

“…Algebraic fault analysis (AFA) seems more promising. Luo et al manage to bring down the number of faults needed to recover the internal state with SHA3-512 down to under 10 with AFA and the 32-bit fault model in the progress described in [15][16][17].…”

Section: Sha-3 Attack In Practicementioning

confidence: 99%

“…The attack in [17] allows the attacker to retrieve the state by injecting multiple faults in the input of the round 22 of Keccak. The faults are allowed to affect up to 1 unit of the state, where units are sized 8b, 16b, or 32b.…”

Section: Sha-3 Attack In Practicementioning

confidence: 99%

See 2 more Smart Citations

Optimizing Electromagnetic Fault Injection with Genetic Algorithms

Maldini

Samwel

Picek

et al. 2019

Automated Methods in Cryptographic Fault Analysis

View full text Add to dashboard Cite

Article 25fa pilot End User AgreementThis publication is distributed under the terms of Article 25fa of the Dutch Copyright Act (Auteurswet) with explicit consent by the author. Dutch law entitles the maker of a short scientific work funded either wholly or partially by Dutch public funds to make that work publicly available for no consideration following a reasonable period of time after the work was first published, provided that clear reference is made to the source of the first publication of the work.This publication is distributed under The Association of Universities in the Netherlands (VSNU) 'Article 25fa implementation' pilot project. In this pilot research outputs of researchers employed by Dutch Universities that comply with the legal requirements of Article 25fa of the Dutch Copyright Act are distributed online and free of cost or other barriers in institutional repositories. Research outputs are distributed six months after their first online publication in the original published version and with proper attribution to the source of the original publication.You are permitted to download and use the publication for personal purposes. All rights remain with the author(s) and/or copyrights owner(s) of this work. Any use of the publication other than authorised under this licence or copyright law is prohibited.If you believe that digital publication of certain material infringes any of your rights or (privacy) interests, please let the Library know, stating your reasons. In case of a legitimate complaint, the Library will make the material inaccessible and/or remove it from the website.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: Sha-3 Attack In Practicementioning

confidence: 99%

See 1 more Smart Citation

Optimizing Electromagnetic Fault Injection with Genetic Algorithms

Maldini

Samwel

Picek

et al. 2019

Automated Methods in Cryptographic Fault Analysis

View full text Add to dashboard Cite

show abstract

“…More recently fault attacks have been combined with SAT problem formulation in the so called Algebraic Fault Analysis [23], [24]. These approaches, still based on the injection of faults during the execution of the algorithm, allow to retrieve the secret key requiring a significantly reduced amount of corrupted digests, thus speeding-up the attack.…”

Section: A the Aes Algorithm And Dfa Attacks To Aesmentioning

confidence: 99%

Lightweight Protection of Cryptographic Hardware Accelerators against Differential Fault Analysis

Lasheras

Canal

Rodríguez

et al. 2020

2020 IEEE 26th International Symposium on on-Line Testing and Robust System Design (IOLTS)

View full text Add to dashboard Cite

Hardware acceleration circuits for cryptographic algorithms are largely deployed in a wide range of products. The HW implementations of such algorithms often suffer from a number of vulnerabilities that expose systems to several attacks, e.g., differential fault analysis (DFA). The challenge for designers is to protect cryptographic accelerators in a cost-effective and power-efficient way. In this paper, we propose a lightweight technique for protecting hardware accelerators implementing AES and SHA-2 (which are two widely used NIST standards) against DFA. The proposed technique exploits partial redundancy to first detect the occurrence of a fault and then to react to the attack by obfuscating the output values. An experimental campaign demonstrated that the overhead introduced is 8.32% for AES and 3.88% for SHA-2 in terms of area, 0.81% for AES and 12.31% for SHA-2 in terms of power with no working frequency reduction. Moreover, a comparative analysis showed that our proposal outperforms the most recent related countermeasures.

show abstract

“…There are two main categories of strategy for defending security attacks: new designed networking protocol-based cryptographic encryption approaches, and physical-layer security (PLS) approaches. One of the encryption methods, secured hash function, which can be implemented with several different algorithms, is applied in many fields such as data transfer safety, message authentication, and other user-linked information transfer [28,29]. However, this method is always realized in upper layers, which is challenging to implement in cooperative cognitive radio communication systems.…”

Section: Introductionmentioning

confidence: 99%

Anti-Wiretap Spectrum-Sharing for Cooperative Cognitive Radio Communication Systems

et al. 2019

Sensors

View full text Add to dashboard Cite

As wireless communication technology keeps progressing, people’s requirements for wireless communication quality are getting higher and higher. Wireless communication brings convenience, but also causes some problems. On the one hand, the traditional static and fixed spectrum allocation strategy leads to high wastefulness of spectrum resources. The direction of improving the utility of spectrum resources by combining the advantages of cooperative communication and cognitive radio has attracted the attention of many scholars. On the other hand, security of communication is becoming an important issue because of the broadcasting nature and openness of wireless communication. Physical-layer security has been brought into focus due to the possibility of improving the security in wireless communication. In this paper, we propose an anti-wiretap spectrum-sharing scheme for cooperative cognitive radio communication systems which can secure the information transmission for the two transmission phases of the cooperative communication. We maximized the secondary system transmission rate by jointly optimizing power and bandwidth while ensuring the primary system achieves its secrecy transmission rate. Useful insights of the proposed anti-wiretap spectrum-sharing scheme are given in the simulation results. Moreover, several system parameters are shown to have a big impact for the simulation results.

show abstract

Algebraic Fault Analysis of SHA-3 Under Relaxed Fault Models

Cited by 16 publications

References 14 publications

Optimizing Electromagnetic Fault Injection with Genetic Algorithms

Optimizing Electromagnetic Fault Injection with Genetic Algorithms

Lightweight Protection of Cryptographic Hardware Accelerators against Differential Fault Analysis

Anti-Wiretap Spectrum-Sharing for Cooperative Cognitive Radio Communication Systems

Contact Info

Product

Resources

About