Garbled Circuits for Leakage-Resilience: Hardware Implementation and Evaluation of One-Time Programs

Abstract

The power of side-channel leakage attacks on cryptographic implementations is evident. Today's practical defenses are typically attack-specific countermeasures against certain classes of side-channel attacks. The demand for a more general solution has given rise to the recent theoretical research that aims to build provably leakage-resilient cryptography. This direction is, however, very new and still largely lacks practitioners' evaluation with regard to both efficiency and practical security. A recent approach, One-Time Programs (OTPs), proposes using Yao's Garbled Circuit (GC) and very simple tamper-proof hardware to securely implement oblivious transfer, to guarantee leakage resilience. Our main contributions are (i) a generic architecture for using GC/ OTP modularly, and (ii) hardware implementation and efficiency analysis of GC/OTP evaluation. We implemented two FPGA-based prototypes: a system-on-a-programmable-chip with access to hardware crypto accelerator (suitable for smartcards and future smartphones), and a stand-alone hardware implementation (suitable for ASIC design). We chose AES as a representative complex function for implementation and measurements. As a result of this work, we are able to understand, evaluate and improve the practicality of employing GC/OTP as a leakageresistance approach.

Hardware Trojans. Part 4: software and hardware countermeasures

“…В работе [4] не рассмат рива лось гомоморфное шифрова-ние, но взамен предложено и проанализиро-вано применение криптографического а лго-ритма с открытым ключом (RSA -шифрование). Использование схем, реализующих алгоритм "искаженных цепей" Яо (Yao's Garbled Circuit) [6], можно рассматривать в качестве альтернатив-ного подхода для обфускации данных вычисли-тельных блоков.…”

“…The authors of [4] did not consider homomorphic encryption, but instead have proposed and analyzed the use of a cryptographic algorithm with a public key (RSA-encryption). The use of schemas that implement the Yao's Garbled Circuit algorithm [6], can be considered as an alternative approach for obfuscation of data of the computing blocks.…”

Twin Clouds: Secure Cloud Computing with Low Latency

“…Although GCs are very efficient as they use only symmetric cryptographic primitives, their main disadvantage is that each GC can be evaluated only once and its size is linear in the size of the evaluated function. As used in several works (e.g., [28,1,13,23,17]), the trusted GC creator can generate GCs in a setup phase and subsequently GCs are evaluated by one or more untrusted parties. Afterwards, the GC creator can verify efficiently that the computations indeed have been performed correctly (verifiability).…”

“…In particular our protocols do not require that the cloud is equipped with trusted hardware modules (as proposed in [20,21,34,26]), while they could benefit from hardware accelerators such as FPGAs or GPUs (cf. [23]). …”

Uniquely Identifiable Tamper-Evident Device Using Coupling between Subwavelength Gratings

“…Garbled circuits promise a general solution to all noninvasive and semi-invasive attacks, with circuit area comparable to existing countermeasures [110][111][112][113][114][115].…”