We found a match
Your institution may have rights to this item. Sign in to continue.
- Title
Single Trace Analysis on Constant Time CDT Sampler and Its Countermeasure.
- Authors
Kim, Suhri; Hong, Seokhie
- Abstract
The Gaussian sampler is an integral part in lattice-based cryptography as it has a direct connection to security and efficiency. Although it is theoretically secure to use the Gaussian sampler, the security of its implementation is an open issue. Therefore, researchers have started to investigate the security of the Gaussian sampler against side-channel attacks. Since the performance of the Gaussian sampler directly affects the performance of the overall cryptosystem, countermeasures considering only timing attacks are applied in the literature. In this paper, we propose the first single trace power analysis attack on a constant-time cumulative distribution table (CDT) sampler used in lattice-based cryptosystems. From our analysis, we were able to recover every sampled value in the key generation stage, so that the secret key is recovered by the Gaussian elimination. By applying our attack to the candidates submitted to the National Institute of Standards and Technology (NIST), we were able to recover over 99% of the secret keys. Additionally, we propose a countermeasure based on a look-up table. To validate the efficiency of our countermeasure, we implemented it in Lizard and measure its performance. We demonstrated that the proposed countermeasure does not degrade the performance.
- Subjects
CLOCK drawing test; GAUSSIAN processes; CRYPTOGRAPHY
- Publication
Applied Sciences (2076-3417), 2018, Vol 8, Issue 10, p1809
- ISSN
2076-3417
- Publication type
Article
- DOI
10.3390/app8101809