Cryptology ePrint Archive: Report 2013/370
Leakage-Resilient Symmetric Cryptography Under Empirically Verifiable Assumptions
François-Xavier Standaert and Olivier Pereira and Yu Yu
Abstract: Leakage-resilient cryptography aims at formally proving the security of cryptographic implementations against large classes of side-channel adversaries. One important challenge for such an approach to be relevant is to adequately connect the formal models used in the proofs with the practice of side-channel attacks. It raises the fundamental problem of finding reasonable restrictions of the leakage functions that can be empirically verified by evaluation laboratories. In this paper, we first argue that the previous ``bounded leakage" requirements used in leakage-resilient cryptography are hard to fulfill by hardware engineers. We then introduce a new, more realistic and empirically verifiable assumption of simulatable leakage, under which security proofs in the standard model can be obtained. We finally illustrate our claims by analyzing the physical security of an efficient pseudorandom generator (for which security could only be proven under a random oracle based assumption so far). These positive results come at the cost of (algorithm-level) specialization, as our new assumption is specifically defined for block ciphers. Nevertheless, since block ciphers are the main building block of many leakage-resilient
cryptographic primitives, our results also open the way towards more realistic constructions and proofs for other pseudorandom objects.
Category / Keywords: implementation / leakage-resilient cryptography
Publication Info: Long version of the paper to appear in the proceedings of Crypto 2013.
Date: received 10 Jun 2013
Contact author: fstandae at uclouvain be
Available format(s): PDF | BibTeX Citation
Version: 20130612:144907 (All versions of this report)
Short URL: ia.cr/2013/370
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]