Improved parallel mask refreshing algorithms: generic solutions with parametrized non-interference and automated optimizations

Refreshing algorithms are a critical ingredient for secure masking. They are instrumental in enabling sound composability properties for complex circuits, and their randomness requirements dominate the performance overheads in (very) high-order masking. In this paper, we improve a proposal of mask r...

Full description

Saved in:
Bibliographic Details
Published in:Journal of cryptographic engineering 2020-04, Vol.10 (1), p.17-26
Main Authors: Barthe, Gilles, Belaïd, Sonia, Dupressoir, François, Fouque, Pierre-Alain, Grégoire, Benjamin, Standaert, François-Xavier, Strub, Pierre-Yves
Format: Article
Language:English
Subjects:
Algorithms
Automation
Circuits and Systems
Communications Engineering
Computer Communication Networks
Computer Science
Cryptography and Security
Cryptology
Data Structures and Information Theory
Interference
Masking
Networks
Operating Systems
Parameterization
Regular Paper
Security
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Refreshing algorithms are a critical ingredient for secure masking. They are instrumental in enabling sound composability properties for complex circuits, and their randomness requirements dominate the performance overheads in (very) high-order masking. In this paper, we improve a proposal of mask refreshing algorithms from EUROCRYPT 2017 that has excellent implementation properties in software and hardware, in two main directions. First, we provide a generic proof that this algorithm is secure at arbitrary orders—a problem that was left open so far. We introduce parametrized non-interference as a new technical ingredient for this purpose that may be of independent interest. Second, we use automated tools to further explore the design space of such algorithms and provide the best known parallel mask refreshing gadgets for concretely relevant security orders. Incidentally, we also prove the security of a recent proposal of mask refreshing with improved resistance against horizontal attacks from CHES 2017.
ISSN:2190-8508
2190-8516
DOI:10.1007/s13389-018-00202-2