Efficient and First-Order DPA Resistant Implementations of Keccak

Begül Bilgin; Joan Daemen; Ventzislav Nikov; S.I. Nikova; Vincent Rijmen; Gilles Van Assche

doi:10.1007/978-3-319-08302-5_13

Efficient and First-Order DPA Resistant Implementations of Keccak

Begül Bilgin, Joan Daemen, Ventzislav Nikov, S.I. Nikova, Vincent Rijmen, Gilles Van Assche

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

51 Citations (Scopus)

42 Downloads (Pure)

Abstract

In October 2012 NIST announced that the SHA-3 hash standard will be based on Keccak. Besides hashing, Keccak can be used in many other modes, including ones operating on a secret value. Many applications of such modes require protection against side-channel attacks, preferably at low cost. In this paper, we present threshold implementations (TI) of Keccak with three and four shares that build further on unprotected parallel and serial architectures. We improve upon earlier TI implementations of Keccak in the sense that the latter did not achieve uniformity of shares. In our proposals we do achieve uniformity at the cost of an extra share in a four-share version or at the cost of injecting a small number of fresh random bits for each computed round. The proposed implementations are efficient and provably secure against first-order side-channel attacks.

Original language	Undefined
Title of host publication	12th Smart Card Research and Advanced Application Conference (CARDIS)
Editors	A. Francillon, P. Rohatgi
Place of Publication	Switzerland
Publisher	Springer
Pages	187-199
Number of pages	13
ISBN (Print)	978-3-319-08302-5
DOIs	https://doi.org/10.1007/978-3-319-08302-5_13
Publication status	Published - Nov 2013
Event	12th Smart Card Research and Advanced Application Conference, CARDIS 2013 - Berlin, Germany Duration: 27 Nov 2013 → 29 Nov 2013 Conference number: 12

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer International Publishing
Number	8419
Volume	8419

Conference

Conference	12th Smart Card Research and Advanced Application Conference, CARDIS 2013
Abbreviated title	CARDIS 2013
Country/Territory	Germany
City	Berlin
Period	27/11/13 → 29/11/13

Keywords

EWI-24466
IR-91871
METIS-305854

Access to Document

10.1007/978-3-319-08302-5_13

http://eprints.eemcs.utwente.nl/secure2/24466/01/chp%253A10.1007%252F978-3-319-08302-5_13.pdf

Cite this

Bilgin, B., Daemen, J., Nikov, V., Nikova, S. I., Rijmen, V., & Van Assche, G. (2013). Efficient and First-Order DPA Resistant Implementations of Keccak. In A. Francillon, & P. Rohatgi (Eds.), 12th Smart Card Research and Advanced Application Conference (CARDIS) (pp. 187-199). (Lecture Notes in Computer Science; Vol. 8419, No. 8419). Springer. https://doi.org/10.1007/978-3-319-08302-5_13

@inproceedings{abd448ef7675417f97c3e2a0aeae5b88,

title = "Efficient and First-Order DPA Resistant Implementations of Keccak",

abstract = "In October 2012 NIST announced that the SHA-3 hash standard will be based on Keccak. Besides hashing, Keccak can be used in many other modes, including ones operating on a secret value. Many applications of such modes require protection against side-channel attacks, preferably at low cost. In this paper, we present threshold implementations (TI) of Keccak with three and four shares that build further on unprotected parallel and serial architectures. We improve upon earlier TI implementations of Keccak in the sense that the latter did not achieve uniformity of shares. In our proposals we do achieve uniformity at the cost of an extra share in a four-share version or at the cost of injecting a small number of fresh random bits for each computed round. The proposed implementations are efficient and provably secure against first-order side-channel attacks.",

keywords = "EWI-24466, IR-91871, METIS-305854",

author = "Beg{\"u}l Bilgin and Joan Daemen and Ventzislav Nikov and S.I. Nikova and Vincent Rijmen and {Van Assche}, Gilles",

note = "10.1007/978-3-319-08302-5_13 ; 12th Smart Card Research and Advanced Application Conference, CARDIS 2013 ; Conference date: 27-11-2013 Through 29-11-2013",

year = "2013",

month = nov,

doi = "10.1007/978-3-319-08302-5_13",

language = "Undefined",

isbn = "978-3-319-08302-5",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

number = "8419",

pages = "187--199",

editor = "A. Francillon and P. Rohatgi",

booktitle = "12th Smart Card Research and Advanced Application Conference (CARDIS)",

address = "Germany",

}

Bilgin, B, Daemen, J, Nikov, V, Nikova, SI, Rijmen, V & Van Assche, G 2013, Efficient and First-Order DPA Resistant Implementations of Keccak. in A Francillon & P Rohatgi (eds), 12th Smart Card Research and Advanced Application Conference (CARDIS). Lecture Notes in Computer Science, no. 8419, vol. 8419, Springer, Switzerland, pp. 187-199, 12th Smart Card Research and Advanced Application Conference, CARDIS 2013, Berlin, Germany, 27/11/13. https://doi.org/10.1007/978-3-319-08302-5_13

Efficient and First-Order DPA Resistant Implementations of Keccak. / Bilgin, Begül; Daemen, Joan; Nikov, Ventzislav et al.
12th Smart Card Research and Advanced Application Conference (CARDIS). ed. / A. Francillon; P. Rohatgi. Switzerland: Springer, 2013. p. 187-199 (Lecture Notes in Computer Science; Vol. 8419, No. 8419).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Efficient and First-Order DPA Resistant Implementations of Keccak

AU - Bilgin, Begül

AU - Daemen, Joan

AU - Nikov, Ventzislav

AU - Nikova, S.I.

AU - Rijmen, Vincent

AU - Van Assche, Gilles

N1 - Conference code: 12

PY - 2013/11

Y1 - 2013/11

N2 - In October 2012 NIST announced that the SHA-3 hash standard will be based on Keccak. Besides hashing, Keccak can be used in many other modes, including ones operating on a secret value. Many applications of such modes require protection against side-channel attacks, preferably at low cost. In this paper, we present threshold implementations (TI) of Keccak with three and four shares that build further on unprotected parallel and serial architectures. We improve upon earlier TI implementations of Keccak in the sense that the latter did not achieve uniformity of shares. In our proposals we do achieve uniformity at the cost of an extra share in a four-share version or at the cost of injecting a small number of fresh random bits for each computed round. The proposed implementations are efficient and provably secure against first-order side-channel attacks.

AB - In October 2012 NIST announced that the SHA-3 hash standard will be based on Keccak. Besides hashing, Keccak can be used in many other modes, including ones operating on a secret value. Many applications of such modes require protection against side-channel attacks, preferably at low cost. In this paper, we present threshold implementations (TI) of Keccak with three and four shares that build further on unprotected parallel and serial architectures. We improve upon earlier TI implementations of Keccak in the sense that the latter did not achieve uniformity of shares. In our proposals we do achieve uniformity at the cost of an extra share in a four-share version or at the cost of injecting a small number of fresh random bits for each computed round. The proposed implementations are efficient and provably secure against first-order side-channel attacks.

KW - EWI-24466

KW - IR-91871

KW - METIS-305854

U2 - 10.1007/978-3-319-08302-5_13

DO - 10.1007/978-3-319-08302-5_13

M3 - Conference contribution

SN - 978-3-319-08302-5

T3 - Lecture Notes in Computer Science

SP - 187

EP - 199

BT - 12th Smart Card Research and Advanced Application Conference (CARDIS)

A2 - Francillon, A.

A2 - Rohatgi, P.

PB - Springer

CY - Switzerland

T2 - 12th Smart Card Research and Advanced Application Conference, CARDIS 2013

Y2 - 27 November 2013 through 29 November 2013

ER -