CryptoDB
Low-Latency Hardware Masking with Application to AES
Authors: |
|
---|---|
Download: | |
Abstract: | During the past two decades there has been a great deal of research published on masked hardware implementations of AES and other cryptographic primitives. Unfortunately, many hardware masking techniques can lead to increased latency compared to unprotected circuits for algorithms such as AES, due to the high-degree of nonlinear functions in their designs. In this paper, we present a hardware masking technique which does not increase the latency for such algorithms. It is based on the LUT-based Masked Dual-Rail with Pre-charge Logic (LMDPL) technique presented at CHES 2014. First, we show 1-glitch extended strong noninterference of a nonlinear LMDPL gadget under the 1-glitch extended probing model. We then use this knowledge to design an AES implementation which computes a full AES-128 operation in 10 cycles and a full AES-256 operation in 14 cycles. We perform practical side-channel analysis of our implementation using the Test Vector Leakage Assessment (TVLA) methodology and analyze univariate as well as bivariate t-statistics to demonstrate its DPA resistance level. |
Video from TCHES 2020
BibTeX
@article{tches-2020-30163, title={Low-Latency Hardware Masking with Application to AES}, journal={IACR Transactions on Cryptographic Hardware and Embedded Systems}, publisher={Ruhr-Universität Bochum}, volume={2020, Issue 2}, pages={300-326}, url={https://tches.iacr.org/index.php/TCHES/article/view/8553}, doi={10.13154/tches.v2020.i2.300-326}, author={Pascal Sasdrich and Begül Bilgin and Michael Hutter and Mark E. Marson}, year=2020 }