International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Low-Latency and Low-Randomness Second-Order Masked Cubic Functions

Authors:
Aein Rezaei Shahmirzadi , Ruhr University Bochum, Horst Görtz Institute for IT Security, Bochum, Germany
Siemen Dhooghe , imec-COSIC, ESAT, KU Leuven, Leuven, Belgium
Amir Moradi , Ruhr University Bochum, Horst Görtz Institute for IT Security, Bochum, Germany
Download:
DOI: 10.46586/tches.v2023.i1.113-152
URL: https://tches.iacr.org/index.php/TCHES/article/view/9949
Search ePrint
Search Google
Abstract: Masking schemes are the most popular countermeasure to mitigate Side-Channel Analysis (SCA) attacks. Compared to software, their hardware implementations require certain considerations with respect to physical defaults, such as glitches. To counter this extended leakage effect, the technique known as Threshold Implementation (TI) has proven to be a reliable solution. However, its efficiency, namely the number of shares, is tied to the algebraic degree of the target function. As a result, the application of TI may lead to unaffordable implementation costs. This dependency is relaxed by the successor schemes where the minimum number of d + 1 shares suffice for dth-order protection independent of the function’s algebraic degree. By this, although the number of input shares is reduced, the implementation costs are not necessarily low due to their high demand for fresh randomness. It becomes even more challenging when a joint low-latency and low-randomness cost is desired. In this work, we provide a methodology to realize the second-order glitch-extended probing-secure implementation of cubic functions with three shares while allowing to reuse fresh randomness. This enables us to construct low-latency second-order secure implementations of several popular lightweight block ciphers, including Skinny, Midori, and Prince, with a very limited number of fresh masks. Notably, compared to state-of-the-art equivalent implementations, our designs lower the latency in terms of the number of clock cycles while keeping randomness costs low.
BibTeX
@article{tches-2022-32683,
  title={Low-Latency and Low-Randomness Second-Order Masked Cubic Functions},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universität Bochum},
  volume={2023, Issue 1},
  pages={113-152},
  url={https://tches.iacr.org/index.php/TCHES/article/view/9949},
  doi={10.46586/tches.v2023.i1.113-152},
  author={Aein Rezaei Shahmirzadi and Siemen Dhooghe and Amir Moradi},
  year=2022
}