A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Cong Chen; Mohammad Farmani; Thomas and Eisenbarth

doi:10.1007/978-3-662-53887-6_30

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Cong Chen, Mohammad Farmani, Thomas and Eisenbarth

Institut für IT-Sicherheit

Worcester Polytechnic Institute

Abstract

This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

Originalsprache	Englisch
Titel	Advances in Cryptology – ASIACRYPT 2016
Redakteure/-innen	Jung Hee Cheon, Tsuyoshi Takagi
Seitenumfang	25
Band	10031
Erscheinungsort	Berlin, Heidelberg
Herausgeber (Verlag)	Springer Berlin Heidelberg
Erscheinungsdatum	09.11.2016
Seiten	819-843
ISBN (Print)	978-3-662-53886-9
ISBN (elektronisch)	978-3-662-53887-6
DOIs	https://doi.org/10.1007/978-3-662-53887-6_30
Publikationsstatus	Veröffentlicht - 09.11.2016
Veranstaltung	22th International Conference on the Theory and Application of Cryptology and Information Security - Hanoi, Vietnam Dauer: 04.12.2016 → 08.12.2016

UN SDGs

Dieser Output leistet einen Beitrag zu folgendem(n) Ziel(en) für nachhaltige Entwicklung

Zugriff auf Dokument

10.1007/978-3-662-53887-6_30

https://eprint.iacr.org/2016/434.pdf

Andere Dateien und Links

https://www.researchgate.net/publication/309778035_A_Tale_of_Two_Shares_Why_Two-Share_Threshold_Implementation_Seems_Worthwhile-and_Why_It_Is_Not

Zitieren

Chen, C., Farmani, M., & and Eisenbarth, T. (2016). A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. in J. H. Cheon, & T. Takagi (Hrsg.), Advances in Cryptology – ASIACRYPT 2016 (Band 10031, S. 819-843). (Lecture Notes in Computer Science; Band 10031). Springer Berlin Heidelberg. https://doi.org/10.1007/978-3-662-53887-6_30

@inbook{d16f1edfebbe434087a5bc1f8e5cb1ea,

title = "A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not",

abstract = "This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.",

author = "Cong Chen and Mohammad Farmani and {and Eisenbarth}, Thomas",

year = "2016",

month = nov,

day = "9",

doi = "10.1007/978-3-662-53887-6_30",

language = "English",

isbn = "978-3-662-53886-9",

volume = "10031",

series = "Lecture Notes in Computer Science",

publisher = "Springer Berlin Heidelberg",

pages = "819--843",

editor = "Cheon, {Jung Hee} and Tsuyoshi Takagi",

booktitle = "Advances in Cryptology – ASIACRYPT 2016",

note = "22th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2016 ; Conference date: 04-12-2016 Through 08-12-2016",

}

Chen, C, Farmani, M & and Eisenbarth, T 2016, A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. in JH Cheon & T Takagi (Hrsg.), Advances in Cryptology – ASIACRYPT 2016. Bd. 10031, Lecture Notes in Computer Science, Bd. 10031, Springer Berlin Heidelberg, Berlin, Heidelberg, S. 819-843, 22th International Conference on the Theory and Application of Cryptology and Information Security, Hanoi, Vietnam, 04.12.16. https://doi.org/10.1007/978-3-662-53887-6_30

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. / Chen, Cong; Farmani, Mohammad; and Eisenbarth, Thomas.
Advances in Cryptology – ASIACRYPT 2016. Hrsg. / Jung Hee Cheon; Tsuyoshi Takagi. Band 10031 Berlin, Heidelberg: Springer Berlin Heidelberg, 2016. S. 819-843 (Lecture Notes in Computer Science; Band 10031).

Publikation: Kapitel in Büchern/Berichten/Konferenzbänden › Kapitel › Begutachtung

TY - CHAP

T1 - A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

AU - Chen, Cong

AU - Farmani, Mohammad

AU - and Eisenbarth, Thomas

PY - 2016/11/9

Y1 - 2016/11/9

N2 - This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

AB - This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

UR - https://www.researchgate.net/publication/309778035_A_Tale_of_Two_Shares_Why_Two-Share_Threshold_Implementation_Seems_Worthwhile-and_Why_It_Is_Not

U2 - 10.1007/978-3-662-53887-6_30

DO - 10.1007/978-3-662-53887-6_30

M3 - Chapter

SN - 978-3-662-53886-9

VL - 10031

T3 - Lecture Notes in Computer Science

SP - 819

EP - 843

BT - Advances in Cryptology – ASIACRYPT 2016

A2 - Cheon, Jung Hee

A2 - Takagi, Tsuyoshi

PB - Springer Berlin Heidelberg

CY - Berlin, Heidelberg

T2 - 22th International Conference on the Theory and Application of Cryptology and Information Security

Y2 - 4 December 2016 through 8 December 2016

ER -

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Abstract

UN SDGs

Zugriff auf Dokument

Andere Dateien und Links

Fingerprint

Zitieren