International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Paper: Generic Low-Latency Masking in Hardware

Authors:
Hannes Groß , Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Inffeldgasse 16a, 8010 Graz, Austria
Rinat Iusupov , Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Inffeldgasse 16a, 8010 Graz, Austria
Roderick Bloem , Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Inffeldgasse 16a, 8010 Graz, Austria
Download:
DOI: 10.13154/tches.v2018.i2.1-21
URL: https://tches.iacr.org/index.php/TCHES/article/view/871
Search ePrint
Search Google
Abstract: In this work, we introduce a generalized concept for low-latency masking that is applicable to any implementation and protection order, and (in its most extreme form) does not require on-the-fly randomness. The main idea of our approach is to avoid collisions of shared variables in nonlinear circuit parts and to skip the share compression. We show the feasibility of our approach on a full implementation of a one-round unrolled Ascon variant and on an AES S-box case study. Additionally, we discuss possible trade-offs to make our approach interesting for practical implementations. As a result, we obtain a first-order masked AES S-box that is calculated in a single clock cycle with rather high implementation costs (60.7 kGE), and a two-cycle variant with much less implementation costs (6.7 kGE). The side-channel resistance of our Ascon S-box designs up to order three are then verified using the formal analysis tool of [BGI+18]. Furthermore, we introduce a taint checking based verification approach that works specifically for our low-latency approach and allows us to verify large circuits like our low-latency AES S-box design in reasonable time.
Video from TCHES 2018
Video provided under Creative Commons / CC BY 3.0
BibTeX
@article{tches-2018-28955,
  title={Generic Low-Latency Masking in Hardware},
  journal={Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universität Bochum},
  volume={2018, Issue 2},
  pages={1-21},
  url={https://tches.iacr.org/index.php/TCHES/article/view/871},
  doi={10.13154/tches.v2018.i2.1-21},
  author={Hannes Groß and Rinat Iusupov and Roderick Bloem},
  year=2018
}