A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Cong Chen; Mohammad Farmani; Thomas and Eisenbarth

doi:10.1007/978-3-662-53887-6_30

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Cong Chen, Mohammad Farmani, Thomas and Eisenbarth

Institute of IT Security

Worcester Polytechnic Institute

21 Citations (Scopus)

Abstract

This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

Original language	English
Title of host publication	Advances in Cryptology – ASIACRYPT 2016
Editors	Jung Hee Cheon, Tsuyoshi Takagi
Number of pages	25
Volume	10031
Place of Publication	Berlin, Heidelberg
Publisher	Springer Berlin Heidelberg
Publication date	09.11.2016
Pages	819-843
ISBN (Print)	978-3-662-53886-9
ISBN (Electronic)	978-3-662-53887-6
DOIs	https://doi.org/10.1007/978-3-662-53887-6_30
Publication status	Published - 09.11.2016
Event	22th International Conference on the Theory and Application of Cryptology and Information Security - Hanoi, Viet Nam Duration: 04.12.2016 → 08.12.2016

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 9 Industry, Innovation, and Infrastructure
SDG 11 Sustainable Cities and Communities
SDG 12 Responsible Consumption and Production

Access to Document

10.1007/978-3-662-53887-6_30

https://eprint.iacr.org/2016/434.pdf

Cite this

Chen, C., Farmani, M., & and Eisenbarth, T. (2016). A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. In J. H. Cheon, & T. Takagi (Eds.), Advances in Cryptology – ASIACRYPT 2016 (Vol. 10031, pp. 819-843). (Lecture Notes in Computer Science; Vol. 10031). Springer Berlin Heidelberg. https://doi.org/10.1007/978-3-662-53887-6_30

@inbook{d16f1edfebbe434087a5bc1f8e5cb1ea,

title = "A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not",

abstract = "This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.",

author = "Cong Chen and Mohammad Farmani and \{and Eisenbarth\}, Thomas",

year = "2016",

month = nov,

day = "9",

doi = "10.1007/978-3-662-53887-6\_30",

language = "English",

isbn = "978-3-662-53886-9",

volume = "10031",

series = "Lecture Notes in Computer Science",

publisher = "Springer Berlin Heidelberg",

pages = "819--843",

editor = "Cheon, \{Jung Hee\} and Tsuyoshi Takagi",

booktitle = "Advances in Cryptology – ASIACRYPT 2016",

note = "22th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2016 ; Conference date: 04-12-2016 Through 08-12-2016",

}

Chen, C, Farmani, M & and Eisenbarth, T 2016, A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. in JH Cheon & T Takagi (eds), Advances in Cryptology – ASIACRYPT 2016. vol. 10031, Lecture Notes in Computer Science, vol. 10031, Springer Berlin Heidelberg, Berlin, Heidelberg, pp. 819-843, 22th International Conference on the Theory and Application of Cryptology and Information Security, Hanoi, Viet Nam, 04.12.16. https://doi.org/10.1007/978-3-662-53887-6_30

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not. / Chen, Cong; Farmani, Mohammad; and Eisenbarth, Thomas.
Advances in Cryptology – ASIACRYPT 2016. ed. / Jung Hee Cheon; Tsuyoshi Takagi. Vol. 10031 Berlin, Heidelberg: Springer Berlin Heidelberg, 2016. p. 819-843 (Lecture Notes in Computer Science; Vol. 10031).

Research output: Chapters in Books/Reports/Conference Proceedings › Chapter › peer-review

TY - CHAP

T1 - A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

AU - Chen, Cong

AU - Farmani, Mohammad

AU - and Eisenbarth, Thomas

PY - 2016/11/9

Y1 - 2016/11/9

N2 - This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

AB - This work explores the possibilities for practical Threshold Implementation (TI) with only two shares in order for a smaller design that needs less randomness but is still first-order leakage resistant. We present the first two-share Threshold Implementations of two lightweight block ciphers---Simon and Present. The implementation results show that two-share TI improves the compactness but usually further reduces the throughput when compared with first-order resistant three-share schemes. Our leakage analysis shows that two-share TI can retain perfect first-order resistance. However, the analysis also exposes a strong second-order leakage. All results are backed up by simulation as well as analysis of actual implementations.

UR - https://www.researchgate.net/publication/309778035_A_Tale_of_Two_Shares_Why_Two-Share_Threshold_Implementation_Seems_Worthwhile-and_Why_It_Is_Not

U2 - 10.1007/978-3-662-53887-6_30

DO - 10.1007/978-3-662-53887-6_30

M3 - Chapter

SN - 978-3-662-53886-9

VL - 10031

T3 - Lecture Notes in Computer Science

SP - 819

EP - 843

BT - Advances in Cryptology – ASIACRYPT 2016

A2 - Cheon, Jung Hee

A2 - Takagi, Tsuyoshi

PB - Springer Berlin Heidelberg

CY - Berlin, Heidelberg

T2 - 22th International Conference on the Theory and Application of Cryptology and Information Security

Y2 - 4 December 2016 through 8 December 2016

ER -

A Tale of Two Shares: Why Two-Share Threshold Implementation Seems Worthwhile-and Why It Is Not

Abstract

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this