Paper 2020/199

Improvement on a Masked White-box Cryptographic Implementation

Seungkwang Lee and Myungchul Kim

Abstract

White-box cryptography is a software technique to protect secret keys of cryptographic algorithms from attackers who have access to memory. By adapting techniques of differential power analysis to computation traces consisting of runtime information, Differential Computation Analysis (DCA) has recovered the secret keys from white-box cryptographic implementations. In order to thwart DCA, a masked white-box implementation has been suggested. However, each byte of the round output was not masked and just permuted by byte encodings. This is the main reason behind the success of DCA variants on the masked white-box implementation. In this paper, we improve the masked white-box cryptographic implementation in such a way to protect against DCA variants by obfuscating the round output with random masks. Specifically, we implement a white-box AES implementation applying masking techniques to the key-dependent intermediate value and the several outer-round outputs. Our analysis and experimental results show that the proposed method can protect against DCA variants including DCA with a 2-byte key guess, collision and bucketing attacks. This work requires approximately 3.7 times the table size and 0.7 times the number of lookups compared to the previous masked WB-AES implementation.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
Published elsewhere. Minor revision. IEEE ACCESS, May, 2020
Keywords
white-box cryptographymaskingDCAcollision attackbucketing attackcountermeasure
Contact author(s)
skwang @ etri re kr
mck @ kaist ac kr
History
2020-12-18: last of 4 revisions
2020-02-18: received
See all versions
Short URL
https://ia.cr/2020/199
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2020/199,
      author = {Seungkwang Lee and Myungchul Kim},
      title = {Improvement on a Masked White-box Cryptographic Implementation},
      howpublished = {Cryptology {ePrint} Archive, Paper 2020/199},
      year = {2020},
      url = {https://eprint.iacr.org/2020/199}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.