Security Reductions for White-Box Key-Storage in Mobile Payments

Bock, Estuardo Alpírez; Brzuska, Chris; Fischlin, Marc; Janson, Christian; Michiels, Wil

doi:10.1007/978-3-030-64837-4_8

Cited by 6 publications

(1 citation statement)

References 22 publications

(13 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Combining White Box and Hardware Binding. In Bock et al [Bock et al 2019], the combination of white box techniques and hardware binding solutions are shown to be conceptually sound. They focus on its usage in mobile payment applications, using hardware and application binding to ensure protection against code-lifting attacks.…”

Section: Possible Usage Scenariosmentioning

confidence: 99%

A Minimal White-Box Dedicated Cipher Proposal Using Incompressible Lookup Tables: Space-Hard AES

Rodrigues,

Dahab,

López

et al. 2023

Anais Do XXIII Simpósio Brasileiro De Segurança Da Informação E De Sistemas Computacionais (SBSeg 2023)

View full text Add to dashboard Cite

In a white-box context, an attacker has full access to the execution environment and the implementation of cryptographic algorithms. Dedicated white-box ciphers, such as WEM and SPNbox, provide incompressibility and key extraction protections in this context, at the cost of increased memory usage and performance loss compared to standard ciphers. Even when a pure white-box threat model is not warranted, the use of incompressible lookup tables can be helpful in deterring side-channel attacks. In this paper we present a simple threat model for such scenarios and propose a dedicated cipher, Space-Hard AES, which provides minimal incompressibility guarantees while presenting better performance for ARMv8 implementations than other dedicated ciphers.

show abstract

Section: Possible Usage Scenariosmentioning

confidence: 99%