Masking in Fine-Grained Leakage Models: Construction, Implementation and Verification

We propose a new approach for building efficient, provably secure, and practically hardened implementations of masked algorithms. Our approach is based on a Domain Specific Language in which users can write efficient assembly implementations and fine-grained leakage models. The latter are then used...

Full description

Saved in:
Bibliographic Details
Published inIACR transactions on cryptographic hardware and embedded systems Vol. 2021; no. 2; pp. 189 - 228
Main Authors Barthe, Gilles, Gourjon, Marc, Grégoire, Benjamin, Orlt, Maximilian, Paglialonga, Clara, Porth, Lars
Format Journal Article
LanguageEnglish
Published IACR 23.02.2021
Ruhr-Universität Bochum
Subjects
Computer Science
Cryptography and Security
Domain Specific Language
Higher-order masking
Probing security
Side-channel resilience
Verification
Higher-order masking
Domain Specific Language
Side-channel resilience
Verification
Probing security
Online AccessGet full text

Cover

More Information
Summary:We propose a new approach for building efficient, provably secure, and practically hardened implementations of masked algorithms. Our approach is based on a Domain Specific Language in which users can write efficient assembly implementations and fine-grained leakage models. The latter are then used as a basis for formal verification, allowing for the first time formal guarantees for a broad range of device-specific leakage effects not addressed by prior work. The practical benefits of our approach are demonstrated through a case study of the PRESENT S-Box: we develop a highly optimized and provably secure masked implementation, and show through practical evaluation based on TVLA that our implementation is practically resilient. Our approach significantly narrows the gap between formal verification of masking and practical security.
ISSN:2569-2925
2569-2925
DOI:10.46586/tches.v2021.i2.189-228