Paper 2017/918

Linear Repairing Codes and Side-Channel Attacks

Hervé Chabanne, Houssem Maghrebi, and Emmanuel Prouff


To strengthen the resistance of countermeasures based on secret sharing, several works have suggested to use the scheme introduced by Shamir in 1978, which proposes to use the evaluation of a random d-degree polynomial into n > d public points to share the sensitive data. Applying the same principles used against the classical Boolean sharing, all these works have assumed that the most efficient attack strategy was to exploit the minimum number of shares required to rebuild the sensitive value; which is d+1 if the reconstruction is made with Lagrange's interpolation. In this paper, we highlight first an important difference between Boolean and Shamir's sharings which implies that, for some signal-to-noise ratio, it is more advantageous for the adversary to observe strictly more than d+1 shares. We argue that this difference is related to the existence of so-called exact linear repairing codes, which themselves come with reconstruction formulae that need (much) less information (counted in bits) than Lagrange's interpolation. In particular, this result implies that, contrary to what was believed, the choice of the public points in Shamir's sharing has an impact on the countermeasure strength. As another contribution, we exhibit a positive impact of the existence of linear exact repairing schemes; we indeed propose to use them to improve the state-of-the-art multiplication algorithms dedicated to Shamir's sharing. We argue that the improvement can be effective when the multiplication operation in the base field is at least two times smaller than in its sub-fields.

Available format(s)
Publication info
Side-Channel AnalysisSharingMaskingShamir's SharingReed-Solmon Codes
Contact author(s)
e prouff @ gmail com
2017-09-24: received
Short URL
Creative Commons Attribution


      author = {Hervé Chabanne and Houssem Maghrebi and Emmanuel Prouff},
      title = {Linear Repairing Codes and Side-Channel Attacks},
      howpublished = {Cryptology ePrint Archive, Paper 2017/918},
      year = {2017},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.