Cryptology ePrint Archive: Report 2014/912

Low-Cost Concurrent Error Detection for GCM and CCM

Xiaofei Guo and Ramesh Karri

Abstract: In many applications, encryption alone does not provide enough security. To enhance security, dedicated authenticated encryption (AE) mode are invented. Galios Counter Mode (GCM) and Counter with CBC-MAC mode (CCM) are the AE modes recommended by the National Institute of Standards and Technology. To support high data rates, AE modes are usually implemented in hardware. However, natural faults reduce its reliability and may undermine both its encryption and authentication capability. We present a low-cost concurrent error detection (CED) scheme for 7 AE architectures. The proposed technique explores idle cycles of the AE mode architectures. Experimental results shows that the performance overhead can be lower than 100% for all architectures depending on the workload. FPGA implementation results show that the hardware overhead in the 0.1-23.3% range and the power overhead is in the 0.2-23.2% range. ASIC implementation results show that the hardware overhead in the 0.1-22.8% range and the power overhead is in the 0.3-12.6% range. The underlying block cipher and hash module need not have CED built in. Thus, it allows system designers to integrate block cipher and hash function intellectual property from different vendors.

Category / Keywords: implementation / concurrent error detection, fault attack, reliability, GCM, CCM, authenticated encryption, secret-key cryptography, AES

Original Publication (with minor differences): Journal of Electronic Testing: Theory and Applications

Date: received 5 Nov 2014

Contact author: xg243 at nyu edu

Available format(s): PDF | BibTeX Citation

Version: 20141105:121412 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]