CryptoDB
Extending Randomness-Free First-Order Masking Schemes and Applications to Masking-Friendly S-boxes
| Authors: | |
|---|---|
| Download: | |
| Abstract: | Masking has emerged as a widely adopted countermeasure against side-channel attacks. However, the implementation of masking schemes faces several challenges, including hardware area, latency and the overhead associated with fresh randomness generation. To eliminate the implementation cost caused by fresh randomness, Shahmirzadi et al. introduced a methodology for constructing 2-share first-order masking schemes without randomness at CHES 2021. In this work, we extend Shahmirzadi et al.’s method to find masked implementations for more S-boxes and further reduce the hardware overhead. We propose the concept of a non-linear compression layer, a comprehensive share assignment strategy based on a linear compression layer, and corresponding optimization techniques. Based on these techniques, we construct the first randomness-free first-order masking schemes for the PRINCE S-box and its inverse, reduce the hardware overhead of masking schemes for multiple S-boxes, and design new masking-friendly S-boxes. Particularly for the SKINNY S-box, the reduction is 21% and 15% in area and power consumption, respectively. To validate the security of masked implementations, we not only employ the automated tools SILVER and PROLEAD but also conduct FPGA-based experiments. |
BibTeX
@article{tches-2024-34874,
title={Extending Randomness-Free First-Order Masking Schemes and Applications to Masking-Friendly S-boxes},
journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
publisher={Ruhr-Universität Bochum},
volume={2025},
pages={340-366},
url={https://tches.iacr.org/index.php/TCHES/article/view/11932},
doi={10.46586/tches.v2025.i1.340-366},
author={Lixuan Wu and Yanhong Fan and Weijia Wang and Bart Preneel and Meiqin Wang},
year=2024
}