12 research outputs found
Applying TVLA to Public Key Cryptographic Algorithms
Test Vector Leakage Assessment (TVLA) has been proposed as a method of determining if a side-channel attack is feasible, for a given implementation of a block cipher, by looking for leakage without conducting an attack. The thresholds chosen for the evaluation of leakage are chosen such that passing the tests gives a strong indication that no leakage is present. In this document, we describe how TVLA can be adapted to pubic key cryptographic algorithms, with a specific focus on RSA, ECDSA and ECDH
Altered post-capillary and collecting venular reactivity in skeletal muscle with metabolic syndrome
Mitigation and degradation of natural organic matters (NOMs) during ferrate(VI) application for drinking water treatment
A pre-silicon logic level security verification flow for higher-order masking schemes against glitches on FPGAs
Design and leakage assessment of side channel attack resistant binary edwards Elliptic Curve digital signature algorithm architectures
Side-Channel Analysis of SM2: A Late-Stage Featurization Case Study
SM2 is a public key cryptography suite originating from Chinese standards, including digital signatures and public key encryption. Ahead of schedule, code for this functionality was recently mainlined in OpenSSL, marked for the upcoming 1.1.1 release. We perform a security review of this implementation, uncovering various deficiencies ranging from traditional software quality issues to side-channel risks. To assess the latter, we carry out a side-channel security evaluation and discover that the implementation hits every pitfall seen for OpenSSL's ECDSA code in the past decade. We carry out remote timings, cache timings, and EM analysis, with accompanying empirical data to demonstrate secret information leakage during execution of both digital signature generation and public key decryption. Finally, we propose, implement, and empirically evaluate countermeasures.publishedVersionPeer reviewe