The Notion of Transparency Order, Revisited

Li, Huizhong; Zhou, Yongbin; Ming, Jingdian; Yang, Guang; Jin, Chan

doi:10.1093/comjnl/bxaa069

Cited by 17 publications

(29 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For several years, many properties have been formulated and tested to measure resistance in side-channel scenarios. Some of the most known criteria for evaluating side-channel resilience are signal-to-noise ratio differential power attacks (SNR-DPA) [8], modified transparency order [9], revisited transparency order [10], confusion coefficient [11], [12], extended later to confusion coefficient variance [13], and non absolute indicator [45]. In this paper, There are several applications of evolutionary algorithms when creating S-boxes with good cryptographic properties.…”

Section: Introductionmentioning

confidence: 99%

Evolving Nonlinear S-Boxes With Improved Theoretical Resilience to Power Attacks

et al. 2020

View full text Add to dashboard Cite

Substitution boxes are the main nonlinear component of block ciphers. The security of these ciphers against linear, differential, or side-channel attacks is dependent on the design of such component and their intrinsic properties. There are several methods that aim to cryptographically define, generate, or search for strong substitution boxes. The application of combinatorial optimization algorithms is one of the most useful methodologies in this research area. In this paper, we present a novel hybrid method based on the Leaders and Followers and hill-climbing over Hamming Weight Classes metaheuristics, coupled with a new trade-off fitness function that generates 8-bit bijective substitution boxes with good resisting properties towards classical cryptanalysis and side-channel attacks by power consumption. We address the best Pareto optimal solutions for the multi-objective optimization of non-linearity and confusion coefficient variance.

show abstract

Section: Introductionmentioning

confidence: 99%

Evolving Nonlinear S-Boxes With Improved Theoretical Resilience to Power Attacks

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Thus, the natural question is how to measure the resistance of S-boxes against side-channel attacks. Several metrics such as Signal-to-Noise Ratio (SNR), Transparency Order (TO) and Non-linearity have been introduced and studied [4], [5], [7], [16] regarding the S-box resistance against side-channel attacks. In this section we give a brief overview of the metrics used in our study.…”

Section: Metrics For Side-channel Assessmentmentioning

confidence: 99%

“…It is highly desirable to have metrics that can indicate a system's vulnerability to this attack as it could guide computer architects in making design decisions and security, power, and performance trade-offs. In order to give a clearer insight on the data leakage, we propose to use the Correlation Power Analysis (CPA) based on the Hamming Weight model and our experimental work includes several theoretical metrics such as Transparency Order (TO) [4], Revisited Transparency Order (RTO) [5], Signal-To-Noise Ratio [6], DPA Signal-To-Noise Ratio (DPA-SNR) [7], and Non-Linearity [8]. Then we show that efficient attacks can be conducted against unprotected implementations of several substitution-permutation network (SPN) based lightweight ciphers such as GIFT [9], [10], PICCOLO [11], and PRESENT [12].…”

Section: Introductionmentioning

confidence: 99%

Side-channel Leakage Assessment Metrics: A Case Study of GIFT Block Ciphers

Unger

Babinkostova

Borowczak

et al. 2021

2021 IEEE Computer Society Annual Symposium on VLSI (ISVLSI)

View full text Add to dashboard Cite

Determination of an adequate level of security and providing subsequent mechanisms to achieve it, is one of the most pressing problems regarding embedded computing devices. While there are some solutions available for resource-rich computer systems, direct application of these solutions to resource-constrained environments are often unfeasible. The fundamental problem for such resource-constrained systems is the fact that current cryptographic algorithms utilize significant energy consumption and storage overhead. Both the cryptographic algorithm and its physical implementation affect the resilience of a cryptosystem against side-channel attacks. A side-channel attack represents a process that exploits leakages in order to extract sensitive information such as the key. This paper focuses on Correlation Power Analysis (CPA) which is side-channel attack based on the power consumption leakage. In 2016 the U.S. Commerce Department's National Institute of Standards and Technology (NIST) initiated the call for proposals of new cryptographic algorithms to strengthen the cryptographic defense of networked devices against cyberattacks and to protect the data created by those innumerable device. This work evaluates S-boxes used by NIST candidates PICCOLO, GIFT, and PRESENT, as well as several S-box variants that demonstrated sufficient weaknesses against classical cryptanalysis, for a quantitative comparison in terms of resiliency to CPA attack. Three well-known theoretical metrics are evaluated: transparency order (TO and RTO), nonlinearity, and signal-to-noise (SNR) ratio, aiming to characterize the resistance of these S-boxes against adversaries exploiting physical leakages. Experimental results from attacks on an 8bit XMEGA were obtained via the ChipWhisperer platform and of all the S-boxes evaluated, GIFT64 with a PICCOLO S-box was found to be the most susceptible to CPA. Results showed that variations in TO and RTO were not sufficient to ensure practical CPA resistance and that among S-boxes with equal non-linearity there were no significant differences in the TO and SNR variants.

show abstract

“…In particular, power attacks are a real threat to cryptographic algorithm implementations [10,11], and it is necessary to find a balance between the intrinsic resistance of S-boxes to to those attacks and the resistance against linear and differential cryptanalysis [12]. To measure the theoretical resistance of S-boxes to differential power attacks, different metrics have been proposed, such as the order of transparency redefined and revisited under the Hamming distance leakage model [13,14], and the confusion coefficient of the variance under the Hamming weight leakage model [15]. In this context, different methods have been used to search for S-boxes with high nonlinearity and high resistance to power attacks [8,16,17].…”

Section: Introductionmentioning

confidence: 99%

Search-Space Reduction for S-Boxes Resilient to Power Attacks

et al. 2021

View full text Add to dashboard Cite

The search of bijective n×n S-boxes resilient to power attacks in the space of dimension (2n)! is a controversial topic in the cryptology community nowadays. This paper proposes partitioning the space of (2n)! S-boxes into equivalence classes using the hypothetical power leakage according to the Hamming weights model, which ensures a homogeneous theoretical resistance within the class against power attacks. We developed a fast algorithm to generate these S-boxes by class. It was mathematically demonstrated that the theoretical metric confusion coefficient variance takes constant values within each class. A new search strategy—jumping over the class space—is justified to find S-boxes with high confusion coefficient variance in the space partitioned by Hamming weight classes. In addition, a decision criterion is proposed to move quickly between or within classes. The number of classes and the number of S-boxes within each class are calculated, showing that, as n increases, the class space dimension is an ever-smaller fraction of the space of S-boxes, which significantly reduces the space of search of S-boxes resilient to power attacks, when the search is performed from class to class.

show abstract

The Notion of Transparency Order, Revisited

Cited by 17 publications

References 35 publications

Evolving Nonlinear S-Boxes With Improved Theoretical Resilience to Power Attacks

Evolving Nonlinear S-Boxes With Improved Theoretical Resilience to Power Attacks

Side-channel Leakage Assessment Metrics: A Case Study of GIFT Block Ciphers

Search-Space Reduction for S-Boxes Resilient to Power Attacks

Contact Info

Product

Resources

About