Export Citations
Publications
Save this search
Please login to be able to save your searches and receive alerts for new content matching your search criteria.
- short-paper
CASCA: A Design Automation Approach for Designing Hardware Countermeasures Against Side-Channel Attacks
ACM Transactions on Design Automation of Electronic Systems, Volume 23, Issue 6•November 2018, Article No.: 69, pp 1-17 • https://doi.org/10.1145/3241047Implementing a cryptographic circuit poses challenges not always acknowledged in the backing mathematical theory. One of them is the vulnerability against side-channel attacks. A side-channel attack is a procedure that uses information leaked by the ...
- Article
KangarooTwelve: Fast Hashing Based on
Applied Cryptography and Network Security•July 2018, pp 400-418• https://doi.org/10.1007/978-3-319-93387-0_21AbstractWe present KangarooTwelve, a fast and secure arbitrary output-length hash function aiming at a higher speed than the FIPS 202’s SHA-3 and SHAKE functions. While sharing many features with SHAKE128, like the cryptographic primitive, the sponge ...
- research-article
A Fault-Based Secret Key Retrieval Method for ECDSA: Analysis and Countermeasure
- Alessandro Barenghi,
- Guido M. Bertoni,
- Luca Breveglieri,
- Gerardo Pelosi,
- Stefano Sanfilippo,
- Ruggero Susella
ACM Journal on Emerging Technologies in Computing Systems, Volume 13, Issue 1•January 2017, Article No.: 8, pp 1-26 • https://doi.org/10.1145/2767132Elliptic curve cryptosystems proved to be well suited for securing systems with constrained resources like embedded and portable devices. In a fault-based attack, errors are induced during the computation of a cryptographic primitive, and the results ...
- Article
Simulations of Optical Emissions for Attacking AES and Masked AES
SPACE 2015: Proceedings of the 5th International Conference on Security, Privacy, and Applied Cryptography Engineering - Volume 9354•October 2015, pp 172-189• https://doi.org/10.1007/978-3-319-24126-5_11In this paper we present a novel attack based on photonic emission analysis targeting software implementations of AES. We focus on the particular case in which the attacker can collect the photonic emission of a limited number of sense amplifiers e.g. ...
- article
Sufficient conditions for sound tree and sequential hashing modes
International Journal of Information Security, Volume 13, Issue 4•August 2014, pp 335-353 • https://doi.org/10.1007/s10207-013-0220-yHash functions are usually composed of a mode of operation on top of a concrete primitive with fixed input-length and fixed output-length, such as a block cipher or a permutation. In practice, the mode is often sequential, although parallel (or tree) ...
- article
The Making of KECCAK
The sponge function KECCAK is the versatile successor of SHA-1 and the SHA-2 series of hash functions. Its structure and components are quite different from its predecessors, and at first sight it seems like a complete break with the past. In this ...
- article
A fault induction technique based on voltage underfeeding with application to attacks against AES and RSA
Journal of Systems and Software, Volume 86, Issue 7•July, 2013, pp 1864-1878 • https://doi.org/10.1016/j.jss.2013.02.021Fault injection attacks have proven to be a powerful tool to exploit the implementation weaknesses of cryptographic algorithms. Several techniques perturbing the computation of a cipher have been devised and successfully employed to leak secret ...
- research-article
Fault attack to the elliptic curve digital signature algorithm with multiple bit faults
SIN '11: Proceedings of the 4th international conference on Security of information and networks•November 2011, pp 63-72• https://doi.org/10.1145/2070425.2070438Elliptic curve cryptosystems proved to be well suited for securing systems with constrained resources like embedded and portable devices. In a fault attack, errors are induced during the computation of a cryptographic primitive, and the faulty results ...
- Article
On the Efficiency of Design Time Evaluation of the Resistance to Power Attacks
DSD '11: Proceedings of the 2011 14th Euromicro Conference on Digital System Design•August 2011, pp 777-785• https://doi.org/10.1109/DSD.2011.103Side-channel attacks are a realistic threat to the security of real world implementations of cryptographic algorithms. In order to evaluate the resistance of designs against power analysis attacks, power values obtained from circuit simulations in early ...
- Article
Duplexing the sponge: single-pass authenticated encryption and other applications
SAC'11: Proceedings of the 18th international conference on Selected Areas in Cryptography•August 2011, pp 320-337• https://doi.org/10.1007/978-3-642-28496-0_19This paper proposes a novel construction, called duplex, closely related to the sponge construction, that accepts message blocks to be hashed and---at no extra cost---provides digests on the input blocks received so far. It can be proven equivalent to a ...
- Article
Sponge-based pseudo-random number generators
CHES'10: Proceedings of the 12th international conference on Cryptographic hardware and embedded systems•August 2010, pp 33-47This paper proposes a new construction for the generation of pseudo-random numbers. The construction is based on sponge functions and is suitable for embedded security devices as it requires few resources. We propose a model for such generators and ...
- Article
Low Voltage Fault Attacks on the RSA Cryptosystem
FDTC '09: Proceedings of the 2009 Workshop on Fault Diagnosis and Tolerance in Cryptography•September 2009, pp 23-31• https://doi.org/10.1109/FDTC.2009.30Fault injection attacks are a powerful tool to exploit implementative weaknessesof robust cryptographic algorithms. The faults induced during the computation of the cryptographic primitives allow to extract pieces of information about the secret ...
- Article
Practical Power Analysis Attacks to RSA on a Large IP Portfolio SoC
ITNG '09: Proceedings of the 2009 Sixth International Conference on Information Technology: New Generations•April 2009, pp 455-460• https://doi.org/10.1109/ITNG.2009.189The RSA algorithm is the most widely used public-key cryptosystem. For this reason it is important to protect RSA-based cryptosystems from the threat of Side Channels Attacks and particularly from Power Analysis.This article presents the application of ...
- research-article
Security Evaluation of WDDL and SecLib Countermeasures against Power Attacks
- Sylvain Guilley,
- Laurent Sauvage,
- Philippe Hoogvorst,
- Renaud Pacalet,
- Guido Marco Bertoni,
- Sumanta Chaudhuri
IEEE Transactions on Computers, Volume 57, Issue 11•November 2008, pp 1482-1497 • https://doi.org/10.1109/TC.2008.109Power-constant logic styles are promising solutions to counter-act side-channel attacks on sensitive cryptographic devices. Recently, one vulnerability has been identified in a standard-cell based power-constant logic called WDDL. Another logic, ...
- article
A pairing SW implementation for Smart-Cards
Journal of Systems and Software, Volume 81, Issue 7•July, 2008, pp 1240-1247 • https://doi.org/10.1016/j.jss.2007.09.022The aim of this work is to show the feasibility of the primitives of the identity based cryptosystems for applications in Smart-Cards. Several observations are applied to easily choose many supersingular elliptic curves over a prime field F"p,p>3,p=...
- Article
On the indifferentiability of the sponge construction
EUROCRYPT'08: Proceedings of the theory and applications of cryptographic techniques 27th annual international conference on Advances in cryptology•April 2008, pp 181-197In this paper we prove that the sponge construction introduced in [4] is indifferentiable from a random oracle when being used with a random transformation or a random permutation and discuss its implications. To our knowledge, this is the first time ...
- Article
A FPGA Coprocessor for the Cryptographic Tate Pairing over Fp
ITNG '08: Proceedings of the Fifth International Conference on Information Technology: New Generations•April 2008, pp 112-119• https://doi.org/10.1109/ITNG.2008.260Identity based cryptography offers a number of functional advantages over traditional public key cryptosystems and has attracted much research interest in the last few years. The computational costs demanded for such functionalities result to be ...
- Article
Speeding Up AES By Extending a 32 bit Processor Instruction Set
ASAP '06: Proceedings of the IEEE 17th International Conference on Application-specific Systems, Architectures and Processors•September 2006, pp 275-282• https://doi.org/10.1109/ASAP.2006.62Nowadays the need of speed in cipher and decipher operations is more important than in the past. This is due to the diffusion of real time applications, which fact involves the use of cryptography. Many co-processors for cryptography were studied and ...
- Article
Performance of HECC coprocessors using inversion-free formulae
ICCSA'06: Proceedings of the 2006 international conference on Computational Science and Its Applications - Volume Part III•May 2006, pp 1004-1012• https://doi.org/10.1007/11751595_105The HyperElliptic Curve Cryptosystem (HECC) was quite extensively studied during the recent years. In the open literature one can find results on how to improve the group operations of HECC as well as teh implementations for various types of processors. ...