Higher-Order Threshold Implementation of the AES S-Box

In this paper we present a threshold implementation of the Advanced Encryption Standard’s S-box which is secure against first- and second-order power analysis attacks. This security guarantee holds even in the presence of glitches, and includes resistance against bivariate attacks. The design requir...

Full description

Saved in:
Bibliographic Details
Published inSmart Card Research and Advanced Applications pp. 259 - 272
Main Authors De Cnudde, Thomas, Bilgin, Begül, Reparaz, Oscar, Nikov, Ventzislav, Nikova, Svetla
Format Book Chapter
LanguageEnglish
Published Cham Springer International Publishing
SeriesLecture Notes in Computer Science
Subjects
AES
Higher-order
Masking
S-box
Threshold implementations
Online AccessGet full text

Cover

More Information
Summary:In this paper we present a threshold implementation of the Advanced Encryption Standard’s S-box which is secure against first- and second-order power analysis attacks. This security guarantee holds even in the presence of glitches, and includes resistance against bivariate attacks. The design requires an area of 7849 Gate Equivalents and 126 bits of randomness per S-box execution. The implementation is tested on an FPGA platform and its security claim is supported by practical leakage detection tests.
ISBN:9783319312705
3319312707
ISSN:0302-9743
1611-3349
DOI:10.1007/978-3-319-31271-2_16