On the importance of protecting Δ in SFLASH against side channel attacks

Katsuyuki Okeya, Tsuyoshi Takagi, Camille Vuillaume

Research output: Chapter in Book/Report/Conference proceedingConference contribution

3 Citations (Scopus)

Abstract

SFLASH was chosen as one of the final selection of the NESSIE project in 2003, It is one of the most efficient digital signature scheme and is suitable for implementation on memory-constrained devices such as smartcards. Side channel attacks (SCA) are a serious threat to memory-constrained devices. If the implementation on them is careless, we are able to break the secret key. In this paper, we experimentally analyze the effectiveness of a side channel attack on SFLASH. There are two different secret keys for SFLASH, namely the proper secret key (s, t] and the random seed Δ used for the hash function SHA-1. Whereas many papers discussed the security of(s, t), little is known about that of Δ . Steinwandt et al. proposed a theoretical DPA on finding Δ by observing the XOR operations. We propose another DPA on Δ using the addition operation modulo 232, and present an experimental result of the DPA. After obtaining the secret key Δ , the underlying problem of SFLASH can be reduced to the C* problem broken by Patarin. From our simulation, about 1408 pairs of messages and signatures are needed to break SFLASH. Consequently, we have to carefully implement SHA-1 in order to resist SCA on SFLASH.

Original languageEnglish
Title of host publicationInternational Conference on Information Technology
Subtitle of host publicationCoding Computing, ITCC 2004
EditorsP.K. Srimani, A. Abraham, M. Cannataro, J. Domingo-Ferrer, R. Hashemi
Pages560-568
Number of pages9
Volume2
DOIs
Publication statusPublished - Jul 6 2004
EventInternational Conference on Information Technology: Coding Computing, ITCC 2004 - Las Vegas, NV, United States
Duration: Apr 5 2004Apr 7 2004

Other

OtherInternational Conference on Information Technology: Coding Computing, ITCC 2004
CountryUnited States
CityLas Vegas, NV
Period4/5/044/7/04

All Science Journal Classification (ASJC) codes

  • Software
  • Information Systems
  • Engineering(all)

Fingerprint Dive into the research topics of 'On the importance of protecting Δ in SFLASH against side channel attacks'. Together they form a unique fingerprint.

  • Cite this

    Okeya, K., Takagi, T., & Vuillaume, C. (2004). On the importance of protecting Δ in SFLASH against side channel attacks. In P. K. Srimani, A. Abraham, M. Cannataro, J. Domingo-Ferrer, & R. Hashemi (Eds.), International Conference on Information Technology: Coding Computing, ITCC 2004 (Vol. 2, pp. 560-568) https://doi.org/10.1109/ITCC.2004.1286713