On Masked Galois-Field Multiplication for Authenticated Encryption Resistant to Side Channel Analysis

2018 ◽  
pp. 44-57 ◽  
Author(s):  
Hirokazu Oshida ◽  
Rei Ueno ◽  
Naofumi Homma ◽  
Takafumi Aoki
Keyword(s):  
Galois Field ◽  
Side Channel ◽  
Authenticated Encryption ◽  
Side Channel Analysis ◽  
Channel Analysis ◽  
Field Multiplication

scholarly journals Improved Side-Channel Analysis of Finite-Field Multiplication

2015 ◽  
pp. 395-415 ◽  
Author(s):  
Sonia Belaïd ◽  
Jean-Sébastien Coron ◽  
Pierre-Alain Fouque ◽  
Benoît Gérard ◽  
Jean-Gabriel Kammerer ◽  
...  
Keyword(s):  
Finite Field ◽  
Side Channel ◽  
Side Channel Analysis ◽  
Finite Field Multiplication ◽  
Channel Analysis ◽  
Field Multiplication

scholarly journals ISAP – Towards Side-Channel Secure Authenticated Encryption

2017 ◽  
pp. 80-105 ◽  
Author(s):  
Christoph Dobraunig ◽  
Maria Eichlseder ◽  
Stefan Mangard ◽  
Florian Mendel ◽  
Thomas Unterluggauer
Keyword(s):  
Power Analysis ◽  
Side Channel ◽  
Authenticated Encryption ◽  
Session Key ◽  
Bulk Storage ◽  
Side Channel Analysis ◽  
Encryption Schemes ◽  
Secret Keys ◽  
Shared Secret ◽  
Channel Analysis

Side-channel attacks and in particular differential power analysis (DPA) attacks pose a serious threat to cryptographic implementations. One approach to counteract such attacks are cryptographic schemes based on fresh re-keying. In settings of pre-shared secret keys, such schemes render DPA attacks infeasible by deriving session keys and by ensuring that the attacker cannot collect side-channel leakage on the session key during cryptographic operations with different inputs. While these schemes can be applied to secure standard communication settings, current re-keying approaches are unable to provide protection in settings where the same input needs to be processed multiple times. In this work, we therefore adapt the re-keying approach and present a symmetric authenticated encryption scheme that is secure against DPA attacks and that does not have such a usage restriction. This means that our scheme fully complies with the requirements given in the CAESAR call and hence, can be used like other noncebased authenticated encryption schemes without loss of side-channel protection. Its resistance against side-channel analysis is highly relevant for several applications in practice, like bulk storage settings in general and the protection of FPGA bitfiles and firmware images in particular.

Sign in / Sign up

Export Citation Format

Share Document