A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Cong Chen; Mohammad Farmani; Thomas and Eisenbarth

doi:10.1007/978-3-662-53887-6_30

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Cong Chen, Mohammad Farmani, Thomas and Eisenbarth

Institute of IT-Security

Worcester Polytechnic Institute

Abstract

This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

Original language	English
Title of host publication	Advances in Cryptology – ASIACRYPT 2016
Editors	Jung Hee Cheon, Tsuyoshi Takagi
Number of pages	25
Volume	10031
Place of Publication	Berlin, Heidelberg
Publisher	Springer Berlin Heidelberg
Publication date	09.11.2016
Pages	819-843
ISBN (Print)	978-3-662-53886-9
ISBN (Electronic)	978-3-662-53887-6
DOIs	https://doi.org/10.1007/978-3-662-53887-6_30
Publication status	Published - 09.11.2016
Event	22th International Conference on the Theory and Application of Cryptology and Information Security - Hanoi, Viet Nam Duration: 04.12.2016 → 08.12.2016

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1007/978-3-662-53887-6_30

https://eprint.iacr.org/2016/434.pdf

Cite this

Chen, C., Farmani, M., & and Eisenbarth, T. (2016). A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. In J. H. Cheon, & T. Takagi (Eds.), Advances in Cryptology – ASIACRYPT 2016 (Vol. 10031, pp. 819-843). (Lecture Notes in Computer Science; Vol. 10031). Springer Berlin Heidelberg. https://doi.org/10.1007/978-3-662-53887-6_30

@inbook{d16f1edfebbe434087a5bc1f8e5cb1ea,

title = "A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not",

abstract = "This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.",

author = "Cong Chen and Mohammad Farmani and {and Eisenbarth}, Thomas",

year = "2016",

month = nov,

day = "9",

doi = "10.1007/978-3-662-53887-6_30",

language = "English",

isbn = "978-3-662-53886-9",

volume = "10031",

series = "Lecture Notes in Computer Science",

publisher = "Springer Berlin Heidelberg",

pages = "819--843",

editor = "Cheon, {Jung Hee} and Tsuyoshi Takagi",

booktitle = "Advances in Cryptology – ASIACRYPT 2016",

note = "22th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2016 ; Conference date: 04-12-2016 Through 08-12-2016",

}

Chen, C, Farmani, M & and Eisenbarth, T 2016, A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. in JH Cheon & T Takagi (eds), Advances in Cryptology – ASIACRYPT 2016. vol. 10031, Lecture Notes in Computer Science, vol. 10031, Springer Berlin Heidelberg, Berlin, Heidelberg, pp. 819-843, 22th International Conference on the Theory and Application of Cryptology and Information Security, Hanoi, Viet Nam, 04.12.16. https://doi.org/10.1007/978-3-662-53887-6_30

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. / Chen, Cong; Farmani, Mohammad; and Eisenbarth, Thomas.
Advances in Cryptology – ASIACRYPT 2016. ed. / Jung Hee Cheon; Tsuyoshi Takagi. Vol. 10031 Berlin, Heidelberg: Springer Berlin Heidelberg, 2016. p. 819-843 (Lecture Notes in Computer Science; Vol. 10031).

Research output: Chapters in Books/Reports/Conference Proceedings › Chapter › peer-review

TY - CHAP

T1 - A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

AU - Chen, Cong

AU - Farmani, Mohammad

AU - and Eisenbarth, Thomas

PY - 2016/11/9

Y1 - 2016/11/9

N2 - This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

AB - This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

UR - https://www.researchgate.net/publication/309778035_A_Tale_of_Two_Shares_Why_Two-Share_Threshold_Implementation_Seems_Worthwhile-and_Why_It_Is_Not

U2 - 10.1007/978-3-662-53887-6_30

DO - 10.1007/978-3-662-53887-6_30

M3 - Chapter

SN - 978-3-662-53886-9

VL - 10031

T3 - Lecture Notes in Computer Science

SP - 819

EP - 843

BT - Advances in Cryptology – ASIACRYPT 2016

A2 - Cheon, Jung Hee

A2 - Takagi, Tsuyoshi

PB - Springer Berlin Heidelberg

CY - Berlin, Heidelberg

T2 - 22th International Conference on the Theory and Application of Cryptology and Information Security

Y2 - 4 December 2016 through 8 December 2016

ER -

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Abstract

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this