Side-Channel Analysis of Multiplications in GF(2 128 ) Application to AES-GCM

Abstract : In this paper, we study the side-channel security of the field multiplication in GF(2^n). We particularly focus on GF(2^{128}) multiplication which is the one used in the authentication part of AES-GCM but the proposed attack also applies to other binary extensions. In a hard-ware implementation using a 128-bit multiplier, the full 128-bit secret is manipulated at once. In this context, classical DPA attacks based on the divide and conquer strategy cannot be applied. In this work, the algebraic structure of the multiplication is leveraged to recover bits of information about the secret multiplicand without having to perform any key-guess. To do so, the leakage corresponding to the writing of the multiplication output into a register is considered. It is assumed to follow a Hamming weight/distance leakage model. Under these particular, yet easily met, assumption we exhibit a nice connection between the key recovery problem and some classical coding and Learning Parities with Noise problems with certain instance parameters. In our case, the noise is very high, but the length of the secret is rather short. In this work we investigate different solving techniques corresponding to different attacker models and eventually refine the attack when considering particular implementations of the multiplication.
Type de document :
Communication dans un congrès
Advances in Cryptology - ASIACRYPT 2014 - 20th International Conference on the Theory and Application of Cryptology and Information Security, Dec 2014, Kaoshiung, Taiwan. Springer, LNCS 8874, pp.20, 2014, ASIACRYPT 2014. 〈http://des.cse.nsysu.edu.tw/asiacrypt2014/〉
Liste complète des métadonnées

Littérature citée [31 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01093987
Contributeur : Pierre-Alain Fouque <>
Soumis le : jeudi 11 décembre 2014 - 14:39:57
Dernière modification le : mercredi 16 mai 2018 - 11:23:29
Document(s) archivé(s) le : samedi 15 avril 2017 - 07:49:36

Fichier

article.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : hal-01093987, version 1

Citation

Sonia Belaid, Pierre-Alain Fouque, Benoit Gérard. Side-Channel Analysis of Multiplications in GF(2 128 ) Application to AES-GCM. Advances in Cryptology - ASIACRYPT 2014 - 20th International Conference on the Theory and Application of Cryptology and Information Security, Dec 2014, Kaoshiung, Taiwan. Springer, LNCS 8874, pp.20, 2014, ASIACRYPT 2014. 〈http://des.cse.nsysu.edu.tw/asiacrypt2014/〉. 〈hal-01093987〉

Partager

Métriques

Consultations de la notice

356

Téléchargements de fichiers

642