Towards Fair and Efficient Evaluations of Leaking Cryptographic Devices - Overview of the ERC Project CRASH, Part I -

Standaert, François-Xavier
(2016) 6th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2016) — Location: Hyderabad (India) (14.December.2016)

Files

TowardsFairandEfficientEvaluationsofLeakingCryptographicDevices-OverviewoftheERCProjectCRASHPartI.pdf
  • Open Access
  • Adobe PDF
  • 205.3 KB
Download

Details

Authors
Abstract
Side-channel analysis is an important concern for the security of cryptographic implementations, and may lead to powerful key recovery attacks if no countermeasures are deployed. Therefore, various types of protection mechanisms have been proposed over the last 20 years. In view of the cost and performance overheads caused by these protections, their fair evaluation is a primary concern for hardware and software designers. Yet, the physical nature of side-channel analysis also renders the security evaluation of cryptographic implementations very different than the one of cryptographic algorithms against mathematical cryptanalysis. That is, while the latter can be quantified based on (well-defined) time, data and memory complexities, the evaluation of side-channel analysis additionally requires to quantify the informativeness and exploitability of the physical leakages. This implies that a part of these security evaluations is inherently heuristic and dependent on engineering expertise. The development of sound tools allowing designers and evaluation laboratories to deal with this challenge was one of the main objectives of the CRASH project funded by the European Research Council. In this talk, I will survey a number of results we obtained in this direction, starting with concrete evaluation methodologies that are well-adapted to the investigation of current embedded devices, and following with emerging trends for future implementations. Quite naturally, a large number of researchers and teams have worked on similar directions. For each of the topics discussed, I will add a couple of references to publications that I found inspiring/relevant. The list is (obviously) incomplete and only reflects my personal interests. I apologize in advance for omissions.
Affiliations

Citations

  • APA
  • Chicago
  • FWB

Standaert, F.-X. (2016). Towards Fair and Efficient Evaluations of Leaking Cryptographic Devices - Overview of the ERC Project CRASH, Part I -. In Claude Carlet, M. Anwar Hasan, Vishal Saraswat (ed.), Proceedings of the 6th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2016) (p. p. 353-362). Springer. https://doi.org/10.1007/978-3-319-49445-6_20