White-Box ECDSA: Challenges and Existing Solutions

Dottax, Emmanuelle; Giraud, Christophe; Houzelot, Agathe

doi:10.1007/978-3-030-89915-8_9

Cited by 6 publications

(2 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In recent work, Dottax et. al provided a deeper comprehension of the challenges of white-box ECDSA implementations [19]. Ma introduced a white-box Schnorr signature scheme [20] but provided only a limited security analysis.…”

Section: Methodsmentioning

confidence: 99%

RETRACTED: Quantum-Resistance Meets White-BoxCryptography: How to Implement Hash-BasedSignatures against White-Box Attackers?

Bicakci,

Ulker,

Uzunay

et al. 2024

Preprint

View full text Add to dashboard Cite

White-box cryptography challenges the assumption that the endpoints are trusted and aims at providing protection against an adversary more powerful than the one in the traditional black-box cryptographic model. Motivating by the fact that most existing white-box implementations focus on symmetric encryption, we present implementations for hash-based signatures so that the security against white-box attackers (who has read-only access to data with a size bounded by a space-hardness parameter M) depends on the availability of a white-box secure cipher (in addition to a general one-way function). We also introduce parameters and key-generation complexity results for white-box secure instantiation of stateless hash-based signature scheme SPHINCS+, one of the NIST selection for quantum-resistant digital signature algorithms, and its older version SPHINCS. We also present a hash tree based solution for one-time passwords secure in a white-box attacker context. We implement the proposed solutions and share our performance results.

show abstract

Section: Methodsmentioning

confidence: 99%

RETRACTED: Quantum-Resistance Meets White-BoxCryptography: How to Implement Hash-BasedSignatures against White-Box Attackers?

Bicakci,

Ulker,

Uzunay

et al. 2024

Preprint

View full text Add to dashboard Cite

show abstract

“…However, the authors of [ZBJ20] assume, among other things, that a trusted third party and a cloud server are available, which are strong assumptions that do most likely not meet reality. [DGH21] gives an overview of some of the challenges when attempting to defend an ECDSA implementation against a white-box attacker and suggests some countermeasures. The authors of [GG22] present a concrete white-box implementation of the Hidden Field Equation (HFE) signature algorithm for a specific set of internal polynomials.…”

Section: Introductionmentioning

confidence: 99%

Attacks Against White-Box ECDSA and Discussion of Countermeasures

Bauer

Drexler

Gebhardt

et al. 2022

TCHES

View full text Add to dashboard Cite

This paper deals with white-box implementations of the Elliptic Curve Digital Signature Algorithm (ECDSA): First, we consider attack paths to break such implementations. In particular, we provide a systematic overview of various fault attacks, to which ECDSA white-box implementations are especially susceptible. Then, we propose different mathematical countermeasures, mainly based on masking/blinding of sensitive variables, in order to prevent or at least make such attacks more difficult. We also briefly mention some typical implementational countermeasures and their challenges in the ECDSA white-box scenario. Our work has been initiated by the CHES challenge WhibOx Contest 2021, which consisted of designing and breaking white-box ECDSA implementations, so called challenges. We illustrate our results and findings by means of the submitted challenges and provide a comprehensive overview which challenge could be solved in which way. Furthermore, we analyze selected challenges in more details.

show abstract

All Shall FA-LLL: Breaking CT-RSA 2022 and CHES 2022 Infective Countermeasures with Lattice-Based Fault Attacks

Barbu

Giraud

2023

Lecture Notes in Computer Science

View full text Add to dashboard Cite

White-Box ECDSA: Challenges and Existing Solutions

Cited by 6 publications

References 35 publications

RETRACTED: Quantum-Resistance Meets White-BoxCryptography: How to Implement Hash-BasedSignatures against White-Box Attackers?

RETRACTED: Quantum-Resistance Meets White-BoxCryptography: How to Implement Hash-BasedSignatures against White-Box Attackers?

Attacks Against White-Box ECDSA and Discussion of Countermeasures

All Shall FA-LLL: Breaking CT-RSA 2022 and CHES 2022 Infective Countermeasures with Lattice-Based Fault Attacks

Contact Info

Product

Resources

About