White-Box Security Notions for Symmetric Encryption Schemes

  • Cécile Delerablée
  • Tancrède Lepoint
  • Pascal Paillier
  • Matthieu Rivain
Conference paper

DOI: 10.1007/978-3-662-43414-7_13

Volume 8282 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Delerablée C., Lepoint T., Paillier P., Rivain M. (2014) White-Box Security Notions for Symmetric Encryption Schemes. In: Lange T., Lauter K., Lisoněk P. (eds) Selected Areas in Cryptography -- SAC 2013. SAC 2013. Lecture Notes in Computer Science, vol 8282. Springer, Berlin, Heidelberg

Abstract

White-box cryptography has attracted a growing interest from researchers in the last decade. Several white-box implementations of standard block-ciphers (DES, AES) have been proposed but they have all been broken. On the other hand, neither evidence of existence nor proofs of impossibility have been provided for this particular setting. This might be in part because it is still quite unclear what white-box cryptography really aims to achieve and which security properties are expected from white-box programs in applications. This paper builds a first step towards a practical answer to this question by translating folklore intuitions behind white-box cryptography into concrete security notions. Specifically, we introduce the notion of white-box compiler that turns a symmetric encryption scheme into randomized white-box programs, and we capture several desired security properties such as one-wayness, incompressibility and traceability for white-box programs. We also give concrete examples of white-box compilers that already achieve some of these notions. Overall, our results open new perspectives on the design of white-box programs that securely implement symmetric encryption.

Keywords

White-box cryptography Security notions Attack models Security games Traitor tracing 

Copyright information

© Springer-Verlag Berlin Heidelberg 2014

Authors and Affiliations

  • Cécile Delerablée
    • 1
  • Tancrède Lepoint
    • 1
    • 2
  • Pascal Paillier
    • 1
  • Matthieu Rivain
    • 1
  1. 1.CryptoExpertsParisFrance
  2. 2.École Normale SupérieureParisFrance