Connecting and Improving Direct Sum Masking and Inner Product Masking

Poussier, Romain; Guo, Qian; Standaert, François‐Xavier; Carlet, Claude; Guilley, Sylvain

doi:10.1007/978-3-319-75208-2_8

Cited by 16 publications

(29 citation statements)

References 37 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• Bit-level security order d b : in practice, each bit of sensitive variable can be investigated independently or/and several bits can be evaluated jointly. We consider here the number of bits that can be probed by attackers, which is consistent with the bit-level probing model proposed by Poussier et al [22].…”

Section: Security Order Regarding Side-channel Analysismentioning

confidence: 99%

“…• Inner Product Masking (IPM) [2] is a word-oriented (e.g., byte-oriented) masking scheme, equipped with universal operations (namely, addition and multiplication). It is optimized to resist attacks at both word-level and bit-level probing model [22], which is suitable for computing cryptographic algorithms that are subject to high-order side-channel analysis.…”

Section: State-of-the-art On Side-channel and Fault Protectionmentioning

confidence: 99%

“…The main advantage of IPM is the higher bit-level security order than Boolean masking, which is called "Security Order Amplification" in [26]. It has been proven in [22] that sidechannel resistance is directly connected to the dual distance d ⊥ D of the code D generated by H. Precisely, the security order t of IPM is equal to t = d ⊥ D − 1 [22]. The dual distance of linear code D is equal to the minimum distance of the dual code D ⊥ [18].…”

Section: Security Order Regarding Side-channel Analysismentioning

confidence: 99%

“…In Tab. 1, the maximal d b for IPM codes with n = 4 shares in F 2 8 is only 10 (d ⊥ D = 11), not 11 as in[22] …”

mentioning

confidence: 94%

“…: Instances of codes with X ∈ K = F 2 8 , d b in IPM entries are consist with results in [22] Inputs…”

mentioning

confidence: 99%

See 4 more Smart Citations

Detecting Faults in Inner-Product Masking Scheme - IPM-FD: IPM with Fault Detection

Cheng

Carlet

Goli

et al.

Kalpa Publications in Computing

Self Cite

View full text Add to dashboard Cite

Side-channel analysis and fault injection attacks are two typical threats to cryptographic implementations, especially in modern embedded devices. Thus there is an insistent demand for dual side-channel and fault injection protections. As it is known, masking scheme is a kind of provable countermeasures against side-channel attacks. Recently, inner product masking (IPM) was proposed as a promising higher-order masking scheme against side-channel analysis, but not for fault injection attacks. In this paper, we devise a new masking scheme named IPM-FD. It is built on IPM, which enables fault detection. This novel masking scheme has three properties: the security orders in the word-level probing model, bit-level probing model, and the number of detected faults. IPM-FD is proven secure both in the word-level and in the bit-level probing models, and allows for end-to-end fault detection against fault injection attacks.Furthermore, we illustrate its security order by linking it to one defining parameters of linear code, and show its implementation cost by applying IPM-FD to AES-128.

show abstract

Section: Security Order Regarding Side-channel Analysismentioning

confidence: 99%

Section: State-of-the-art On Side-channel and Fault Protectionmentioning

confidence: 99%