Paper 2013/370

Leakage-Resilient Symmetric Cryptography Under Empirically Verifiable Assumptions

François-Xavier Standaert, Olivier Pereira, and Yu Yu


Leakage-resilient cryptography aims at formally proving the security of cryptographic implementations against large classes of side-channel adversaries. One important challenge for such an approach to be relevant is to adequately connect the formal models used in the proofs with the practice of side-channel attacks. It raises the fundamental problem of finding reasonable restrictions of the leakage functions that can be empirically verified by evaluation laboratories. In this paper, we first argue that the previous ``bounded leakage" requirements used in leakage-resilient cryptography are hard to fulfill by hardware engineers. We then introduce a new, more realistic and empirically verifiable assumption of simulatable leakage, under which security proofs in the standard model can be obtained. We finally illustrate our claims by analyzing the physical security of an efficient pseudorandom generator (for which security could only be proven under a random oracle based assumption so far). These positive results come at the cost of (algorithm-level) specialization, as our new assumption is specifically defined for block ciphers. Nevertheless, since block ciphers are the main building block of many leakage-resilient cryptographic primitives, our results also open the way towards more realistic constructions and proofs for other pseudorandom objects.

Available format(s)
Publication info
Published elsewhere. Long version of the paper to appear in the proceedings of Crypto 2013.
leakage-resilient cryptography
Contact author(s)
fstandae @ uclouvain be
2013-06-12: received
Short URL
Creative Commons Attribution


      author = {François-Xavier Standaert and Olivier Pereira and Yu Yu},
      title = {Leakage-Resilient Symmetric Cryptography Under Empirically Verifiable Assumptions},
      howpublished = {Cryptology ePrint Archive, Paper 2013/370},
      year = {2013},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.