![](/client/images/blank.gif)
Eylem Seç
![Comparing Costs of Protecting Secret Key Ciphers Against Differential Power Analysis için kapak resmi Comparing Costs of Protecting Secret Key Ciphers Against Differential Power Analysis için kapak resmi](/client/assets/d79c3e4af2b6d196/ctx/images/no_image.png)
Comparing Costs of Protecting Secret Key Ciphers Against Differential Power Analysis
Başlık:
Comparing Costs of Protecting Secret Key Ciphers Against Differential Power Analysis
Yazar:
Diehl, William, author.
ISBN:
9780438115330
Yazar Ek Girişi:
Fiziksel Tanımlama:
1 electronic resource (206 pages)
Genel Not:
Source: Dissertation Abstracts International, Volume: 79-11(E), Section: B.
Advisors: Kris Gaj Committee members: Paul Ammann; Jens-Peter Kaps; Avesta Sasan.
Özet:
Secret key ciphers, including block ciphers and authenticated ciphers, are vulnerable to side-channel attacks, including differential power analysis (DPA). The Test Vector Leakage Assessment (TVLA) methodology (i.e., t-test methodology) has been used to verify improved resistance of block ciphers to DPA after application of countermeasures. However, extension of the t-test methodology to authenticated ciphers is non-trivial, since authenticated ciphers require additional input and output conditions, complex interfaces, and long test vectors interlaced with protocol necessary to describe authenticated cipher operations.
In this research we augment an existing side-channel analysis framework (FOBOS) with TVLA methodology for authenticated ciphers. We use TVLA to show that implementations in the Spartan-6 FPGA of the CAESAR Round 3 candidates ACORN, Ascon, CLOC (based on AES and TWINE), SILC (based on AES, PRESENT, and LED), JAMBU (based on AES and SIMON), and Ketje Jr., as well as AES-GCM, are vulnerable to 1st order DPA. We then implement versions of the above ciphers, protected against 1st order DPA, using threshold implementations. The TVLA methodology is used to verify improved resistance to 1st order DPA of the protected cipher implementations. Finally, we benchmark unprotected and protected CAESAR Round 3 cipher implementations in the Spartan-6 FPGA, and compare the costs of 1st order DPA protection in terms of area, frequency, throughput, throughput-to-area (TP/A) ratio, power, and energy per bit (E/bit). The protected cipher implementation with the lowest area, power, E/bit, and highest TP/A ratio is ACORN, while Ketje Jr. has the highest TP, second-highest TP/A ratio, and second-lowest E/bit. On average, protected cipher implementations require 3.1 times as many LUTs, while TP and TP/A decrease by factors of 1.8 and 5.6, respectively. Power and E/bit for protected cipher implementations increase on average by a factor of 3.4 compared to their unprotected versions when measured at a constant frequency of 10 MHz.
The selection of ACORN and Ascon as CAESAR finalists in the lightweight category, along with improvements in methodology resulting from the Round 3 comparison, afford the opportunity for a higher-quality direct comparison between these candidates. The results show that improved protected lightweight implementations of ACORN and Ascon, with an area consumption less than but close to AES-GCM, have 23.3 and 2.5 times, respectively, the TP of AES-GCM. Likewise, implementations of ACORN and Ascon with TP greater than but close to AES-GCM, consume 18% and 74% of the area, respectively, of AES-GCM. The combination of results from the large-scale comparison of CAESAR Round 3 candidates, and the direct comparison between CAESAR Final Round Candidates, provides evidence that ACORN is the most-optimal side-channel resistant CAESAR authenticated cipher candidate.
Notlar:
School code: 0883
Tüzel Kişi Ek Girişi:
Mevcut:*
Yer Numarası | Demirbaş Numarası | Shelf Location | Lokasyon / Statüsü / İade Tarihi |
---|---|---|---|
XX(692573.1) | 692573-1001 | Proquest E-Tez Koleksiyonu | Arıyor... |
On Order
Liste seç
Bunu varsayılan liste yap.
Öğeler başarıyla eklendi
Öğeler eklenirken hata oldu. Lütfen tekrar deneyiniz.
:
Select An Item
Data usage warning: You will receive one text message for each title you selected.
Standard text messaging rates apply.