International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Paper: Side Channel Analysis of Practical Pairing Implementations: Which Path is More Secure?

Authors:
Claire Whelan
Mike Scott
Download:
URL: http://eprint.iacr.org/2006/237
Search ePrint
Search Google
Abstract: We present an investigation into the security of three practical pairing algorithms; the Tate, Eta and Ate pairing, in terms of side channel vulnerability. These three algorithms have recently shown to be efficiently computable on the resource constrained smart card, yet no in depth side channel analysis has yet appeared in the literature. Since the secret parameter input to the pairing can potentially be entered in either of the two possible positions, there exist two avenues of attack, i.e. e(P,Q) or e(Q,P) where P is public and Q is private. We analyse the core operations fundamental to pairings and not only highlight how each implementation may potentially succumb to a side channel attack, but also show how one path is more susceptible than the other in Tate and Ate. For those who wish to deploy pairing based systems we make a simple suggestion to improve resistance to side channel attacks.
BibTeX
@misc{eprint-2006-21730,
  title={Side Channel Analysis of Practical Pairing Implementations: Which Path is More Secure?},
  booktitle={IACR Eprint archive},
  keywords={Side Channel Analysis (SCA), Pairing Based Cryptography, Correlation Power Analysis (CPA), Tate Pairing.},
  url={http://eprint.iacr.org/2006/237},
  note={ cwhelan@computing.dcu.ie 13342 received 10 Jul 2006, last revised 13 Jul 2006},
  author={Claire Whelan and Mike Scott},
  year=2006
}