Fast White-Box Implementations of Dedicated Ciphers on the ARMv8 Architecture

Rodrigues, Félix Carvalho; Fujii, Haruhisa; Serpa, Ana Clara; Sider, Giuliano; Dahab, Ricardo; López, Julio

doi:10.1007/978-3-030-30530-7_17

Cited by 2 publications

(4 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Following the nomenclature of [Rodrigues et al 2019], there are pipelineoptimized versions (4 or 8-way), cache-optimized versions ("Hway"), and single block version (equivalent to a "1-way" version). Pipeline-oriented versions were built on the fact that there are 32 NEON registers, hence avoiding register spilling and penalties associated with it.…”

Section: Resultsmentioning

confidence: 99%

“…The SPNbox-8-CT-Hway version refers to a constant time white-box implementation comparable to the implementation of our proposed Space-Hard AES cipher. For further details, please refer to [Rodrigues et al 2019]. The SpaceHAES-Crypto-4way refers to the pipelined 4-way implementation which uses the hardware AES instructions, while the SpaceHAES-CE-1way implementation refers to the implementation without using the Cryptographic Extension (note that all other implementations use these instructions where possible).…”

Section: Resultsmentioning

confidence: 99%

“…In the context of ARMv8 cryptographic implementations, most works focus on standard block ciphers and modes of operation, such as the AES and the GCM [Gouvêa and López 2015]. In [Rodrigues et al 2019], the SPACE, WEM and SPNbox proposals were compared in regards to their performance for ARMv8 machines. They implemented several versions of the proposed ciphers for ARMv8 machines and provided fair comparisons of all of them using a CTR mode of operation to allow further parallelism.…”

Section: Related Workmentioning

confidence: 99%

“…For the implementation of the different ciphers, several techniques were used. Most are also present in [Rodrigues et al 2019] for the implementation of already proposed dedicated white-box ciphers, such as instruction pipeline optimizations (described as nway implementations in our results) and memory coverage optimizations to reduce cache misses. We briefly show how to implement the required table lookups in a constant time fashion for Space-Hard AES, and then show details on the proposed cipher implementation.…”

Section: Implementation Detailsmentioning

confidence: 99%

See 3 more Smart Citations

A Minimal White-Box Dedicated Cipher Proposal Using Incompressible Lookup Tables: Space-Hard AES

Rodrigues,

Dahab,

López

et al. 2023

Anais Do XXIII Simpósio Brasileiro De Segurança Da Informação E De Sistemas Computacionais (SBSeg 2023)

View full text Add to dashboard Cite

In a white-box context, an attacker has full access to the execution environment and the implementation of cryptographic algorithms. Dedicated white-box ciphers, such as WEM and SPNbox, provide incompressibility and key extraction protections in this context, at the cost of increased memory usage and performance loss compared to standard ciphers. Even when a pure white-box threat model is not warranted, the use of incompressible lookup tables can be helpful in deterring side-channel attacks. In this paper we present a simple threat model for such scenarios and propose a dedicated cipher, Space-Hard AES, which provides minimal incompressibility guarantees while presenting better performance for ARMv8 implementations than other dedicated ciphers.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: Resultsmentioning

confidence: 99%