International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Efficient and Private Computations with Code-Based Masking

Authors:
Weijia Wang , Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium
Pierrick Méaux , Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium
Gaëtan Cassiers , Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium
François-Xavier Standaert , Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium
Download:
DOI: 10.13154/tches.v2020.i2.128-171
URL: https://tches.iacr.org/index.php/TCHES/article/view/8547
Search ePrint
Search Google
Abstract: Code-based masking is a very general type of masking scheme that covers Boolean masking, inner product masking, direct sum masking, and so on. The merits of the generalization are twofold. Firstly, the higher algebraic complexity of the sharing function decreases the information leakage in “low noise conditions” and may increase the “statistical security order” of an implementation (with linear leakages). Secondly, the underlying error-correction codes can offer improved fault resistance for the encoded variables. Nevertheless, this higher algebraic complexity also implies additional challenges. On the one hand, a generic multiplication algorithm applicable to any linear code is still unknown. On the other hand, masking schemes with higher algebraic complexity usually come with implementation overheads, as for example witnessed by inner-product masking. In this paper, we contribute to these challenges in two directions. Firstly, we propose a generic algorithm that allows us (to the best of our knowledge for the first time) to compute on data shared with linear codes. Secondly, we introduce a new amortization technique that can significantly mitigate the implementation overheads of code-based masking, and illustrate this claim with a case study. Precisely, we show that, although performing every single code-based masked operation is relatively complex, processing multiple secrets in parallel leads to much better performances. This property enables code-based masked implementations of the AES to compete with the state-of-the-art in randomness complexity. Since our masked operations can be instantiated with various linear codes, we hope that these investigations open new avenues for the study of code-based masking schemes, by specializing the codes for improved performances, better side-channel security or improved fault tolerance.
Video from TCHES 2020
BibTeX
@article{tches-2020-30157,
  title={Efficient and Private Computations with Code-Based Masking},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universität Bochum},
  volume={2020, Issue 2},
  pages={128-171},
  url={https://tches.iacr.org/index.php/TCHES/article/view/8547},
  doi={10.13154/tches.v2020.i2.128-171},
  author={Weijia Wang and Pierrick Méaux and Gaëtan Cassiers and François-Xavier Standaert},
  year=2020
}