Parallel Implementations of Masking Schemes and the Bounded Moment Leakage Model

Abstract : In this paper, we provide a necessary clarification of the good security properties that can be obtained from parallel implementations of masking schemes. For this purpose, we first argue that (i) the probing model is not straightforward to interpret, since it more naturally captures the intuitions of serial implementations, and (ii) the noisy leakage model is not always convenient, e.g. when combined with formal methods for the verification of cryptographic implementations. Therefore we introduce a new model, the bounded moment model, that formalizes a weaker notion of security order frequently used in the side-channel literature. Interestingly , we prove that probing security for a serial implementation implies bounded moment security for its parallel counterpart. This result therefore enables an accurate understanding of the links between formal security analyses of masking schemes and experimental security evaluations based on the estimation of statistical moments Besides its consolidating nature, our work also brings useful technical contributions. First, we describe and analyze refreshing and multiplication algorithms that are well suited for parallel implementations and improve security against multivariate side-channel attacks. Second, we show that simple refreshing algorithms (with linear complexity) that are not secure in the continuous probing model are secure in the continuous bounded moment model. Eventually, we discuss the independent leakage assumption required for masking to deliver its security promises, and its specificities related to the serial or parallel nature of an implementation.
Type de document :
Communication dans un congrès
Advances in Cryptology - 2017 - 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Apr 2017, Paris, France. 10210, pp.535--566, 2017, Advances in Cryptology - 2017 - 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques
Liste complète des métadonnées

https://hal.inria.fr/hal-01414009
Contributeur : Benjamin Gregoire <>
Soumis le : lundi 12 décembre 2016 - 08:56:23
Dernière modification le : jeudi 10 mai 2018 - 01:15:50
Document(s) archivé(s) le : lundi 27 mars 2017 - 16:00:19

Fichier

parallel_masking_4.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : hal-01414009, version 1

Citation

Gilles Barthe, François Dupressoir, Sebastian Faust, Benjamin Grégoire, François-Xavier Standaert, et al.. Parallel Implementations of Masking Schemes and the Bounded Moment Leakage Model. Advances in Cryptology - 2017 - 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Apr 2017, Paris, France. 10210, pp.535--566, 2017, Advances in Cryptology - 2017 - 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques. 〈hal-01414009〉

Partager

Métriques

Consultations de la notice

426

Téléchargements de fichiers

158