On Evaluating Fault Resilient Encoding Schemes in Software
Autor: | Jakub Breier, Yang Liu, Xiaolu Hou |
---|---|
Přispěvatelé: | School of Computer Science and Engineering |
Rok vydání: | 2021 |
Předmět: |
021110 strategic
defence & security studies Computer science business.industry Cryptographic implementations 0211 other engineering and technologies 02 engineering and technology Fault injection Software Computer engineering Cipher Robustness (computer science) Computer science and engineering::Data::Data encryption [Engineering] Fault Injection Attacks Dynamic program analysis Encoding Schemes Electrical and Electronic Engineering business Implementation Block cipher |
Zdroj: | IEEE Transactions on Dependable and Secure Computing. 18:1065-1079 |
ISSN: | 2160-9209 1545-5971 |
Popis: | Cryptographic implementations are often vulnerable against physical attacks, fault injection analysis being among the most popular techniques. On par with development of attacks, the area of countermeasures is advancing rapidly, utilizing both hardware- and software-based approaches. When it comes to software encoding countermeasures for fault protection and their evaluation, there are very few proposals so far, mostly focusing on single operations rather than cipher as a whole. In this paper we propose an evaluation framework that can be used for analyzing the effectivity of software encoding countermeasures against fault attacks. We first formalize the encoding schemes in software, helping us to define what properties are required when designing a fault protection. Based on these findings, we develop evaluation metric that can be used universally to determine the robustness of a software encoding scheme against bit flip faults and instruction skips. We provide a way to select a code according to user criteria and also a dynamic code analysis method to estimate the level of protection of assembly implementations using encoding schemes. Finally, we verify our findings by implementing a block cipher PRESENT, protected by encoding scheme based on anticodes, and provide a detailed evaluation of this implementation using different codes. Accepted version |
Databáze: | OpenAIRE |
Externí odkaz: |