International Association for Cryptologic Research

International Association
for Cryptologic Research


eLIMInate: a Leakage-focused ISE for Masked Implementation

Hao Cheng , DCS and SnT, University of Luxembourg, Esch-sur-Alzette, Luxembourg
Daniel Page , School of Computer Science, University of Bristol, Bristol, UK
Weijia Wang , School of Cyber Science and Technology, Shandong University, Qingdao, China
DOI: 10.46586/tches.v2024.i2.329-358
Search ePrint
Search Google
Abstract: Even given a state-of-the-art masking scheme, masked software implementation of some cryptography functionality can pose significant challenges stemming, e.g., from simultaneous requirements for efficiency and security. In this paper we design an Instruction Set Extension (ISE) to address a specific element of said challenge, namely the elimination of leakage stemming from architectural and microarchitectural overwriting. Conceptually, the ISE allows a leakage-focused behavioural hint to be communicated from software to the micro-architecture: using it informs how computation is realised when applied to masking-specific data, which then offers an opportunity to eliminate associated leakage. We develop prototype, latencyand area-optimised implementations of the ISE design based on the RISC-V Ibex core. Using them, we demonstrate that use of the ISE can close the gap between assumptions about and actual behaviour of a device and thereby deliver an improved security guarantee.
  title={eLIMInate: a Leakage-focused ISE for Masked Implementation},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universit├Ąt Bochum},
  volume={024 No. 2},
  author={Hao Cheng and Daniel Page and Weijia Wang},