Combined implementation attack resistant exponentiation

Jörn Marc Schmidt; Michael Tunstall; Roberto Avanzi; Ilya Kizhvatov; Timo Kasper; David Oswald

doi:10.1007/978-3-642-14712-8_19

Combined implementation attack resistant exponentiation

Jörn Marc Schmidt, Michael Tunstall, Roberto Avanzi, Ilya Kizhvatov, Timo Kasper, David Oswald

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Different types of implementation attacks, like those based on side channel leakage and active fault injection, are often considered as separate threats. Countermeasures are, therefore, often developed and implemented accordingly. However, Amiel et al. showed that an adversary can successfully combine two attack methods to overcome such countermeasures. In this paper, we consider instances of these combined attacks applied to RSA and elliptic curve-based cryptosystems. We show how previously proposed countermeasures may fail to thwart these attacks, and propose a countermeasure that protects the variables in a generic exponentiation algorithm in the same scenario.

Original language	English
Title of host publication	Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings
Pages	305-322
Number of pages	18
DOIs	https://doi.org/10.1007/978-3-642-14712-8_19
State	Published - 2010
Externally published	Yes
Event	1st International Conference on Cryptology and Information Security in Latin America, LATINCRYPT 2010 - Puebla, Mexico Duration: 8 Aug 2010 → 11 Aug 2010

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	6212 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	1st International Conference on Cryptology and Information Security in Latin America, LATINCRYPT 2010
Country/Territory	Mexico
City	Puebla
Period	8/08/10 → 11/08/10

Keywords

Combined Implementation Attacks
Countermeasures
ECC
Infective Computation
RSA

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-642-14712-8_19

Cite this

Schmidt, J. M., Tunstall, M., Avanzi, R., Kizhvatov, I., Kasper, T., & Oswald, D. (2010). Combined implementation attack resistant exponentiation. In Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings (pp. 305-322). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 6212 LNCS). https://doi.org/10.1007/978-3-642-14712-8_19

Schmidt, Jörn Marc ; Tunstall, Michael ; Avanzi, Roberto et al. / Combined implementation attack resistant exponentiation. Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings. 2010. pp. 305-322 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{6902ded5261a4e4c938ceb2b54b0bc6a,

title = "Combined implementation attack resistant exponentiation",

abstract = "Different types of implementation attacks, like those based on side channel leakage and active fault injection, are often considered as separate threats. Countermeasures are, therefore, often developed and implemented accordingly. However, Amiel et al. showed that an adversary can successfully combine two attack methods to overcome such countermeasures. In this paper, we consider instances of these combined attacks applied to RSA and elliptic curve-based cryptosystems. We show how previously proposed countermeasures may fail to thwart these attacks, and propose a countermeasure that protects the variables in a generic exponentiation algorithm in the same scenario.",

keywords = "Combined Implementation Attacks, Countermeasures, ECC, Infective Computation, RSA",

author = "Schmidt, {J{\"o}rn Marc} and Michael Tunstall and Roberto Avanzi and Ilya Kizhvatov and Timo Kasper and David Oswald",

year = "2010",

doi = "10.1007/978-3-642-14712-8_19",

language = "English",

isbn = "3642147119",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "305--322",

booktitle = "Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings",

note = "1st International Conference on Cryptology and Information Security in Latin America, LATINCRYPT 2010 ; Conference date: 08-08-2010 Through 11-08-2010",

}

Schmidt, JM, Tunstall, M, Avanzi, R, Kizhvatov, I, Kasper, T & Oswald, D 2010, Combined implementation attack resistant exponentiation. in Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 6212 LNCS, pp. 305-322, 1st International Conference on Cryptology and Information Security in Latin America, LATINCRYPT 2010, Puebla, Mexico, 8/08/10. https://doi.org/10.1007/978-3-642-14712-8_19

Combined implementation attack resistant exponentiation. / Schmidt, Jörn Marc; Tunstall, Michael; Avanzi, Roberto et al.
Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings. 2010. p. 305-322 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 6212 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Combined implementation attack resistant exponentiation

AU - Schmidt, Jörn Marc

AU - Tunstall, Michael

AU - Avanzi, Roberto

AU - Kizhvatov, Ilya

AU - Kasper, Timo

AU - Oswald, David

PY - 2010

Y1 - 2010

N2 - Different types of implementation attacks, like those based on side channel leakage and active fault injection, are often considered as separate threats. Countermeasures are, therefore, often developed and implemented accordingly. However, Amiel et al. showed that an adversary can successfully combine two attack methods to overcome such countermeasures. In this paper, we consider instances of these combined attacks applied to RSA and elliptic curve-based cryptosystems. We show how previously proposed countermeasures may fail to thwart these attacks, and propose a countermeasure that protects the variables in a generic exponentiation algorithm in the same scenario.

AB - Different types of implementation attacks, like those based on side channel leakage and active fault injection, are often considered as separate threats. Countermeasures are, therefore, often developed and implemented accordingly. However, Amiel et al. showed that an adversary can successfully combine two attack methods to overcome such countermeasures. In this paper, we consider instances of these combined attacks applied to RSA and elliptic curve-based cryptosystems. We show how previously proposed countermeasures may fail to thwart these attacks, and propose a countermeasure that protects the variables in a generic exponentiation algorithm in the same scenario.

KW - Combined Implementation Attacks

KW - Countermeasures

KW - ECC

KW - Infective Computation

KW - RSA

UR - http://www.scopus.com/inward/record.url?scp=77955870800&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-14712-8_19

DO - 10.1007/978-3-642-14712-8_19

M3 - Conference contribution

AN - SCOPUS:77955870800

SN - 3642147119

SN - 9783642147111

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 305

EP - 322

BT - Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings

T2 - 1st International Conference on Cryptology and Information Security in Latin America, LATINCRYPT 2010

Y2 - 8 August 2010 through 11 August 2010

ER -

Schmidt JM, Tunstall M, Avanzi R, Kizhvatov I, Kasper T, Oswald D. Combined implementation attack resistant exponentiation. In Progress in Cryptology - LATINCRYPT 2010 - First International Conference on Cryptology and Information Security in Latin America, Proceedings. 2010. p. 305-322. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-642-14712-8_19

Combined implementation attack resistant exponentiation

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this