OpenSSL Bellcore's Protection Helps Fault Attack

Faults in software implementations target both data and instructions at different locations. Bellcore attack is a well-known fault attack that is able to break CRT-RSA. In response, cryptographic libraries such as OpenSSL are designed with protections. In this paper, we show two new fault locations...

Full description

Saved in:
Bibliographic Details
Published in2018 21st Euromicro Conference on Digital System Design (DSD) pp. 500 - 507
Main Authors Carre, Sebastien, Desjardins, Matthieu, Facon, Adrien, Guilley, Sylvain
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.08.2018
Subjects
Cathode ray tubes
Cryptography
fault attacks
Fault location
Libraries
monobit
OpenSSL
Random access memory
Registers
Software
Online AccessGet full text
DOI10.1109/DSD.2018.00089

Cover

Abstract Faults in software implementations target both data and instructions at different locations. Bellcore attack is a well-known fault attack that is able to break CRT-RSA. In response, cryptographic libraries such as OpenSSL are designed with protections. In this paper, we show two new fault locations on OpenSSL implementation of the CRT-RSA signature that restore the Bellcore attack and break OpenSSL protection against it. Quite surprisingly, one of the fault we found is made possible because of the existence of such protection.
AbstractList Faults in software implementations target both data and instructions at different locations. Bellcore attack is a well-known fault attack that is able to break CRT-RSA. In response, cryptographic libraries such as OpenSSL are designed with protections. In this paper, we show two new fault locations on OpenSSL implementation of the CRT-RSA signature that restore the Bellcore attack and break OpenSSL protection against it. Quite surprisingly, one of the fault we found is made possible because of the existence of such protection.
Author Guilley, Sylvain
Desjardins, Matthieu
Carre, Sebastien
Facon, Adrien
Author_xml – sequence: 1
  givenname: Sebastien
  surname: Carre
  fullname: Carre, Sebastien
– sequence: 2
  givenname: Matthieu
  surname: Desjardins
  fullname: Desjardins, Matthieu
– sequence: 3
  givenname: Adrien
  surname: Facon
  fullname: Facon, Adrien
– sequence: 4
  givenname: Sylvain
  surname: Guilley
  fullname: Guilley, Sylvain
BookMark eNotjbFOwzAUAF0JhrawsnTxxpTwnoPt57G0lCJFKlJgrlznRY0wSZSYgb-nEkw33d1CXHV9x0LcIeSI4B621TZXgJQDALmZWKAuyNjCWpgLOAzcVVUpnzjG0I98P8m3sU8cUtt3cs9xmOTOf8ck1yn58HkjrhsfJ77951J87J7fN_usPLy8btZldlbgUlYrYu086NowNNo7dZkCOzo5DYGQHBtWPoBBZNWQYXvSpMAae5GauliK1V-3ZebjMLZffvw50qNDMlD8AgVzPgg
CODEN IEEPAD
ContentType Conference Proceeding
DBID 6IE
6IL
CBEJK
RIE
RIL
DOI 10.1109/DSD.2018.00089
DatabaseName IEEE Electronic Library (IEL) Conference Proceedings
IEEE Xplore POP ALL
IEEE Xplore All Conference Proceedings
IEEE Xplore
IEEE Proceedings Order Plans (POP All) 1998-Present
DatabaseTitleList
Database_xml – sequence: 1
  dbid: RIE
  name: IEEE Xplore
  url: https://proxy.k.utb.cz/login?url=https://ieeexplore.ieee.org/
  sourceTypes: Publisher
DeliveryMethod fulltext_linktorsrc
EISBN 1538673770
9781538673775
EndPage 507
ExternalDocumentID 8491860
Genre orig-research
GroupedDBID 6IE
6IL
CBEJK
RIE
RIL
ID FETCH-LOGICAL-h209t-d28e59a05d6e0f5a925380e98b950c8189e6e2ac0611e2f86e7b5820767a05fd3
IEDL.DBID RIE
IngestDate Thu Jun 29 18:38:43 EDT 2023
IsPeerReviewed false
IsScholarly false
Language English
LinkModel DirectLink
MergedId FETCHMERGED-LOGICAL-h209t-d28e59a05d6e0f5a925380e98b950c8189e6e2ac0611e2f86e7b5820767a05fd3
PageCount 8
ParticipantIDs ieee_primary_8491860
PublicationCentury 2000
PublicationDate 2018-Aug
PublicationDateYYYYMMDD 2018-08-01
PublicationDate_xml – month: 08
  year: 2018
  text: 2018-Aug
PublicationDecade 2010
PublicationTitle 2018 21st Euromicro Conference on Digital System Design (DSD)
PublicationTitleAbbrev DSD
PublicationYear 2018
Publisher IEEE
Publisher_xml – name: IEEE
Score 1.7834041
Snippet Faults in software implementations target both data and instructions at different locations. Bellcore attack is a well-known fault attack that is able to break...
SourceID ieee
SourceType Publisher
StartPage 500
SubjectTerms Cathode ray tubes
Cryptography
fault attacks
Fault location
Libraries
monobit
OpenSSL
Random access memory
Registers
Software
Title OpenSSL Bellcore's Protection Helps Fault Attack
URI https://ieeexplore.ieee.org/document/8491860
hasFullText 1
inHoldings 1
isFullTextHit
isPrint
link http://utb.summon.serialssolutions.com/2.0.0/link/0/eLvHCXMwjV3NS8MwFH_MnTypbOI3PQhe7JamTdocxVmGOBHmYLeRpq8Ik25s6cW_3pe2ThEP3kLI10tIfsnL770HcJ1FcRwr2oBFrboJRehrEWqfruIyEYVp9ZCTZzmeRY9zMe_A7c4WBhFr8hkOXLL-y89XpnKqsmESqSCR9EDfo4dbY6vV-mEMmBqOpiNH1XLcSOaitv-IllKDRXoAk69uGo7IclDZbGA-fnlg_O84DqH_bZbnvewA5wg6WPaAOUrIdPrkOUsb55PyZusK2ZpiVXoEK-utl-rq3Xp31mqz7MMsfXi9H_ttGAT_jTNl_ZwnKJRmIpfICqEVp0OKoUoyJZghwFUokWtDyBwgLxKJcSYI2GMZU6UiD4-hW65KPAHPxXzNtQm54BhRa5rWxmiZM6qcRVqfQs9Ju1g3ni4WraBnf2efw76b74YOdwFdu6nwkiDaZlf12nwCD9uQug
linkProvider IEEE
linkToHtml http://utb.summon.serialssolutions.com/2.0.0/link/0/eLvHCXMwjV3NS8MwFH-MedCTyiZ-24PgxW5Z26TNUZyj6jaEbbDbSNNXhEk3XHrxr_elrVPEg7cQ8vUSkl_y8nvvAVwnQRiGkjZgVqpufO67ivvKpau4iHimaz3kaCziWfA05_MG3G5tYRCxJJ9hxybLv_x0pQurKutGgexFgh7oO4T7gaystWpPjD0mu_1J35K1LDuS2bjtP-KllHAx2IfRV0cVS2TZKUzS0R-_fDD-dyQH0P42zHNetpBzCA3MW8AsKWQyGTrW1sZ6pbzZ2EKmJFnlDgHLeuMMVPFmnDtjlF62YTZ4mN7Hbh0IwX31mDRu6kXIpWI8FcgyrqRHxxRDGSWSM02QK1GgpzRhcw-9LBIYJpygPRQhVcpS_wia-SrHY3Bs1NdUad_jHgbUmqLV0UqkjCongVIn0LLSLtaVr4tFLejp39lXsBtPR8PF8HH8fAZ7du4rctw5NM17gRcE2Ca5LNfpE9ymlAo
openUrl ctx_ver=Z39.88-2004&ctx_enc=info%3Aofi%2Fenc%3AUTF-8&rfr_id=info%3Asid%2Fsummon.serialssolutions.com&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&rft.genre=proceeding&rft.title=2018+21st+Euromicro+Conference+on+Digital+System+Design+%28DSD%29&rft.atitle=OpenSSL+Bellcore%27s+Protection+Helps+Fault+Attack&rft.au=Carre%2C+Sebastien&rft.au=Desjardins%2C+Matthieu&rft.au=Facon%2C+Adrien&rft.au=Guilley%2C+Sylvain&rft.date=2018-08-01&rft.pub=IEEE&rft.spage=500&rft.epage=507&rft_id=info:doi/10.1109%2FDSD.2018.00089&rft.externalDocID=8491860