Paper 2018/055

High-Resolution EM Attacks Against Leakage-Resilient PRFs Explained - And An Improved Construction

Florian Unterstein, Johann Heyszl, Fabrizio De Santis, Robert Specht, and Georg Sigl

Abstract

Achieving side-channel resistance through Leakage Resilience (LR) is highly relevant for embedded devices where requirements of other countermeasures such as e.g. high quality random numbers are hard to guarantee. The main challenge of LR lays in the initialization of a secret pseudorandom state from a long-term key and public input. Leakage-Resilient Pseudo-Random Functions (LR-PRFs) aim at solving this by bounding side-channel leakage to non-exploitable levels through frequent re-keying. Medwed et al. recently presented an improved construction at ASIACRYPT 2016 which uses 'unknown-inputs' in addition to limited data complexity and correlated algorithmic noise from parallel S-boxes. However, a subsequent investigation uncovered a vulnerability to high-precision EM analysis on FPGA. In this paper, we follow up on the reasons why such attacks succeed on FPGAs. We find that in addition to the high spatial resolution, it is mainly the high temporal resolution which leads to the reduction of algorithmic noise from parallel S-boxes. While spatial resolution is less threatening for smaller technologies than the used FPGA, temporal resolution will likely remain an issue since balancing the timing behavior of signals in the nanosecond range seems infeasible today. Nonetheless, we present an improvement of the ASIACRYPT 2016 construction to effectively protect against EM attacks with such high spatial and high temporal resolution. We carefully introduce additional key entropy into the LR-PRF construction to achieve a high remaining security level even when implemented on FPGAs. With this improvement, we finally achieve side-channel secure LR-PRFs in a practical and simple way under verifiable empirical assumptions.

Note: The final publication will be available at Springer.

Metadata
Available format(s)
PDF
Publication info
Published elsewhere. Topics in Cryptology CT-RSA 2018
Keywords
Leakage-resilient cryptographyPRFhigh-resolution localized EM attacksAES
Contact author(s)
florian unterstein @ aisec fraunhofer de
History
2018-01-16: received
Short URL
https://ia.cr/2018/055
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2018/055,
      author = {Florian Unterstein and Johann Heyszl and Fabrizio De Santis and Robert Specht and Georg Sigl},
      title = {High-Resolution EM Attacks Against Leakage-Resilient PRFs Explained - And An Improved Construction},
      howpublished = {Cryptology ePrint Archive, Paper 2018/055},
      year = {2018},
      note = {\url{https://eprint.iacr.org/2018/055}},
      url = {https://eprint.iacr.org/2018/055}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.