Security Evaluation Against Side-Channel Analysis at Compilation Time - CNRS - Centre national de la recherche scientifique Accéder directement au contenu
Chapitre D'ouvrage Année : 2019

Security Evaluation Against Side-Channel Analysis at Compilation Time

Nicolas Bruneau
  • Fonction : Auteur
Charles Christen
  • Fonction : Auteur
Jean-Luc Danger
Adrien Facon
  • Fonction : Auteur
Sylvain Guilley

Résumé

Masking countermeasure is implemented to thwart side-channel attacks. The maturity of high-order masking schemes has reached the level where the concepts are sound and proven. For instance, Rivain and Prouff proposed a full-fledged AES at CHES 2010. Some non-trivial fixes regarding refresh functions were needed though. Now, industry is adopting such solutions, and for the sake of both quality and certification requirements , masked cryptographic code shall be checked for correctness using the same model as that of the the theoretical protection rationale (for instance the probing leakage model). Seminal work has been initiated by Barthe et al. at EUROCRYPT 2015 for automated verification at higher orders on concrete implementations. In this paper, we build on this work to actually perform verification from within a compiler, so as to enable timely feedback to the developer. Precisely , our methodology enables to provide the actual security order of the code at the intermediate representation (IR) level, thereby identifying possible flaws (owing either to source code errors or to compiler optimizations). Second, our methodology allows for an exploitability analysis of the analysed IR code. In this respect, we formally handle all the symbolic expressions in the static single assignment (SSA) representation to build the optimal distinguisher function. This enables to evaluate the most powerful attack, which is not only function of the masking order d, but also on the number of leaking samples and of the expressions (e.g., linear vs non-linear leakages). This scheme allows to evaluate the correctness of a masked cryptographic code, and also its actual security in terms of number of traces in a given deployment context.
Fichier principal
Vignette du fichier
19_A2C_masking_attack.pdf (958.63 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02915643 , version 1 (14-08-2020)

Identifiants

Citer

Nicolas Bruneau, Charles Christen, Jean-Luc Danger, Adrien Facon, Sylvain Guilley. Security Evaluation Against Side-Channel Analysis at Compilation Time. Springer. Algebra, Codes and Cryptology (A2C), pp.129-148, 2019, ⟨10.1007/978-3-030-36237-9_8⟩. ⟨hal-02915643⟩
44 Consultations
144 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More