A More Efficient AES Threshold Implementation

Begül Bilgin; Benekikt Gierlichs; Svetla Nikova; Ventzislav Nikov; Vincent Rijmen

doi:10.1007/978-3-319-06734-6_17

A More Efficient AES Threshold Implementation

Begül Bilgin, Benekikt Gierlichs, Svetla Nikova, Ventzislav Nikov, Vincent Rijmen

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

100 Citations (Scopus)

3 Downloads (Pure)

Abstract

Threshold Implementations provide provable security against first-order power analysis attacks for hardware and software implementations. Like masking, the approach relies on secret sharing but it differs in the implementation of logic functions. At Eurocrypt 2011 Moradi et al. published the to date most compact Threshold Implementation of AES-128 encryption. Their work shows that the number of required random bits may be an additional evaluation criterion, next to area and speed. We present a new Threshold Implementation of AES-128 encryption that is 18% smaller, 7.5% faster and that requires 8% less random bits than the implementation from Eurocrypt 2011. In addition, we provide results of a practical security evaluation based on real power traces in adversary-friendly conditions. They confirm the first-order attack resistance of our implementation and show good resistance against higher-order attacks.

Original language	English
Title of host publication	Progress in Cryptology – AFRICACRYPT 2014
Subtitle of host publication	7th International Conference on Cryptology in Africa, Marrakesh, Morocco, May 28-30, 2014. Proceedings
Editors	David Pointcheval, Damien Vergnaud
Place of Publication	Switzerland
Publisher	Springer
Pages	267-284
Number of pages	18
ISBN (Print)	978-3-319-06733-9
DOIs	https://doi.org/10.1007/978-3-319-06734-6_17
Publication status	Published - May 2014
Event	7th International Conference on Cryptology in Africa 2014 - Marrakech, Morocco Duration: 28 May 2014 → 30 May 2014 Conference number: 7

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	8469
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	7th International Conference on Cryptology in Africa 2014
Abbreviated title	AfricaCrypt 2014
Country/Territory	Morocco
City	Marrakech
Period	28/05/14 → 30/05/14

Keywords

SCS-Cybersecurity
METIS-306030
IR-91873
EWI-25074

Access to Document

10.1007/978-3-319-06734-6_17

Cite this

Bilgin, B., Gierlichs, B., Nikova, S., Nikov, V., & Rijmen, V. (2014). A More Efficient AES Threshold Implementation. In D. Pointcheval, & D. Vergnaud (Eds.), Progress in Cryptology – AFRICACRYPT 2014: 7th International Conference on Cryptology in Africa, Marrakesh, Morocco, May 28-30, 2014. Proceedings (pp. 267-284). (Lecture Notes in Computer Science; Vol. 8469). Springer. https://doi.org/10.1007/978-3-319-06734-6_17

Bilgin, Begül ; Gierlichs, Benekikt ; Nikova, Svetla et al. / A More Efficient AES Threshold Implementation. Progress in Cryptology – AFRICACRYPT 2014: 7th International Conference on Cryptology in Africa, Marrakesh, Morocco, May 28-30, 2014. Proceedings. editor / David Pointcheval ; Damien Vergnaud. Switzerland : Springer, 2014. pp. 267-284 (Lecture Notes in Computer Science).

@inproceedings{25a28b8bf50d4c8c99c6278389ec79c6,

title = "A More Efficient AES Threshold Implementation",

abstract = "Threshold Implementations provide provable security against first-order power analysis attacks for hardware and software implementations. Like masking, the approach relies on secret sharing but it differs in the implementation of logic functions. At Eurocrypt 2011 Moradi et al. published the to date most compact Threshold Implementation of AES-128 encryption. Their work shows that the number of required random bits may be an additional evaluation criterion, next to area and speed. We present a new Threshold Implementation of AES-128 encryption that is 18% smaller, 7.5% faster and that requires 8% less random bits than the implementation from Eurocrypt 2011. In addition, we provide results of a practical security evaluation based on real power traces in adversary-friendly conditions. They confirm the first-order attack resistance of our implementation and show good resistance against higher-order attacks.",

keywords = "SCS-Cybersecurity, METIS-306030, IR-91873, EWI-25074",

author = "Beg{\"u}l Bilgin and Benekikt Gierlichs and Svetla Nikova and Ventzislav Nikov and Vincent Rijmen",

note = "eemcs-eprint-25074 ; 7th International Conference on Cryptology in Africa 2014, AfricaCrypt 2014 ; Conference date: 28-05-2014 Through 30-05-2014",

year = "2014",

month = may,

doi = "10.1007/978-3-319-06734-6_17",

language = "English",

isbn = "978-3-319-06733-9",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "267--284",

editor = "David Pointcheval and Damien Vergnaud",

booktitle = "Progress in Cryptology – AFRICACRYPT 2014",

address = "Germany",

}

Bilgin, B, Gierlichs, B, Nikova, S, Nikov, V & Rijmen, V 2014, A More Efficient AES Threshold Implementation. in D Pointcheval & D Vergnaud (eds), Progress in Cryptology – AFRICACRYPT 2014: 7th International Conference on Cryptology in Africa, Marrakesh, Morocco, May 28-30, 2014. Proceedings. Lecture Notes in Computer Science, vol. 8469, Springer, Switzerland, pp. 267-284, 7th International Conference on Cryptology in Africa 2014, Marrakech, Morocco, 28/05/14. https://doi.org/10.1007/978-3-319-06734-6_17

A More Efficient AES Threshold Implementation. / Bilgin, Begül; Gierlichs, Benekikt; Nikova, Svetla et al.
Progress in Cryptology – AFRICACRYPT 2014: 7th International Conference on Cryptology in Africa, Marrakesh, Morocco, May 28-30, 2014. Proceedings. ed. / David Pointcheval; Damien Vergnaud. Switzerland: Springer, 2014. p. 267-284 (Lecture Notes in Computer Science; Vol. 8469).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - A More Efficient AES Threshold Implementation

AU - Bilgin, Begül

AU - Gierlichs, Benekikt

AU - Nikova, Svetla

AU - Nikov, Ventzislav

AU - Rijmen, Vincent

N1 - Conference code: 7

PY - 2014/5

Y1 - 2014/5

N2 - Threshold Implementations provide provable security against first-order power analysis attacks for hardware and software implementations. Like masking, the approach relies on secret sharing but it differs in the implementation of logic functions. At Eurocrypt 2011 Moradi et al. published the to date most compact Threshold Implementation of AES-128 encryption. Their work shows that the number of required random bits may be an additional evaluation criterion, next to area and speed. We present a new Threshold Implementation of AES-128 encryption that is 18% smaller, 7.5% faster and that requires 8% less random bits than the implementation from Eurocrypt 2011. In addition, we provide results of a practical security evaluation based on real power traces in adversary-friendly conditions. They confirm the first-order attack resistance of our implementation and show good resistance against higher-order attacks.

AB - Threshold Implementations provide provable security against first-order power analysis attacks for hardware and software implementations. Like masking, the approach relies on secret sharing but it differs in the implementation of logic functions. At Eurocrypt 2011 Moradi et al. published the to date most compact Threshold Implementation of AES-128 encryption. Their work shows that the number of required random bits may be an additional evaluation criterion, next to area and speed. We present a new Threshold Implementation of AES-128 encryption that is 18% smaller, 7.5% faster and that requires 8% less random bits than the implementation from Eurocrypt 2011. In addition, we provide results of a practical security evaluation based on real power traces in adversary-friendly conditions. They confirm the first-order attack resistance of our implementation and show good resistance against higher-order attacks.

KW - SCS-Cybersecurity

KW - METIS-306030

KW - IR-91873

KW - EWI-25074

U2 - 10.1007/978-3-319-06734-6_17

DO - 10.1007/978-3-319-06734-6_17

M3 - Conference contribution

SN - 978-3-319-06733-9

T3 - Lecture Notes in Computer Science

SP - 267

EP - 284

BT - Progress in Cryptology – AFRICACRYPT 2014

A2 - Pointcheval, David

A2 - Vergnaud, Damien

PB - Springer

CY - Switzerland

T2 - 7th International Conference on Cryptology in Africa 2014

Y2 - 28 May 2014 through 30 May 2014

ER -

Bilgin B, Gierlichs B, Nikova S, Nikov V, Rijmen V. A More Efficient AES Threshold Implementation. In Pointcheval D, Vergnaud D, editors, Progress in Cryptology – AFRICACRYPT 2014: 7th International Conference on Cryptology in Africa, Marrakesh, Morocco, May 28-30, 2014. Proceedings. Switzerland: Springer. 2014. p. 267-284. (Lecture Notes in Computer Science). doi: 10.1007/978-3-319-06734-6_17

A More Efficient AES Threshold Implementation

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this