Block Ciphers That Are Easier to Mask: How Far Can We Go?
- B. GérardAffiliated withICTEAM/ELEN/Crypto Group, Université Catholique de LouvainDirection Générale de l’Armement
- , Vincent GrossoAffiliated withICTEAM/ELEN/Crypto Group, Université Catholique de Louvain
- , M. Naya-PlasenciaAffiliated withINRIA Paris-Rocquencourt
- , François-Xavier StandaertAffiliated withICTEAM/ELEN/Crypto Group, Université Catholique de Louvain
The design and analysis of lightweight block ciphers has been a very active research area over the last couple of years, with many innovative proposals trying to optimize different performance figures. However, since these block ciphers are dedicated to low-cost embedded devices, their implementation is also a typical target for side-channel adversaries. As preventing such attacks with countermeasures usually implies significant performance overheads, a natural open problem is to propose new algorithms for which physical security is considered as an optimization criteria, hence allowing better performances again. We tackle this problem by studying how much we can tweak standard block ciphers such as the AES Rijndael in order to allow efficient masking (that is one of the most frequently considered solutions to improve security against side-channel attacks). For this purpose, we first investigate alternative S-boxes and round structures. We show that both approaches can be used separately in order to limit the total number of non-linear operations in the block cipher, hence allowing more efficient masking. We then combine these ideas into a concrete instance of block cipher called Zorro. We further provide a detailed security analysis of this new cipher taking its design specificities into account, leading us to exploit innovative techniques borrowed from hash function cryptanalysis (that are sometimes of independent interest). Eventually, we conclude the paper by evaluating the efficiency of masked Zorro implementations in an 8-bit microcontroller, and exhibit their interesting performance figures.
- Block Ciphers That Are Easier to Mask: How Far Can We Go?
- Book Title
- Cryptographic Hardware and Embedded Systems - CHES 2013
- Book Subtitle
- 15th International Workshop, Santa Barbara, CA, USA, August 20-23, 2013. Proceedings
- pp 383-399
- Print ISBN
- Online ISBN
- Series Title
- Lecture Notes in Computer Science
- Series Volume
- Series ISSN
- Springer Berlin Heidelberg
- Copyright Holder
- Springer-Verlag Berlin Heidelberg
- Additional Links
- Industry Sectors
- eBook Packages
- Editor Affiliations
- 16. STMicroelectronics
- 17. University of Luxembourg
- Author Affiliations
- 18. ICTEAM/ELEN/Crypto Group, Université Catholique de Louvain, Belgium
- 19. Direction Générale de l’Armement, France
- 20. INRIA Paris-Rocquencourt, France
To view the rest of this content please follow the download PDF link above.