International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Paper: Low Randomness Masking and Shuffling: An Evaluation Using Mutual Information

Authors:
Kostas Papagiannopoulos , Digital Security Department, Radboud University Nijmegen
Download:
DOI: 10.13154/tches.v2018.i3.524-546
URL: https://tches.iacr.org/index.php/TCHES/article/view/7285
Search ePrint
Search Google
Abstract: Side-channel countermeasure designers often face severe performance overheads when trying to protect a device. Widely applied countermeasures such as masking and shuffling entail generating a large amount of random numbers, which can result in a computational bottleneck. To mitigate the randomness cost, this work evaluates low-randomness versions of both masking and shuffling, namely Recycled Randomness Masking (RRM) and Reduced Randomness Shuffling (RRS). These countermeasures employ memory units to store generated random numbers and reuse them in subsequent computations,making them primarily suitable for implementation on devices with sufficient memory. Both RRM and RRS are evaluated using the MI-based framework in the context of horizontal attacks. The evaluation exhibits the tradeoff between the randomness cost and the noisy leakage security level offered by the countermeasures, enabling the designer to fine-tune a masking or shuffling scheme and maximize the security level achieved for a certain cost.
BibTeX
@article{tches-2018-29068,
  title={Low Randomness Masking and Shuffling: An Evaluation Using Mutual Information},
  journal={IACR Trans. Cryptogr. Hardw. Embed. Syst.},
  publisher={Ruhr-Universit├Ąt Bochum},
  volume={2018, Issue 3},
  pages={524-546},
  url={https://tches.iacr.org/index.php/TCHES/article/view/7285},
  doi={10.13154/tches.v2018.i3.524-546},
  author={Kostas Papagiannopoulos},
  year=2018
}