Projects per year
Abstract
In the context of fault attacks on nonce-based authenticated encryption, an attacker faces two restrictions. The first is the uniqueness of the nonce for each new encryption that prevents the attacker from collecting pairs of correct and faulty outputs to perform, e.g., differential fault attacks. The second restriction concerns the verification/decryption, which releases only verified plaintext. While many recent works either exploit misuse scenarios (e.g. nonce-reuse, release of unverified plaintext), we turn the fact that the decryption/verification gives us information on the effect of a fault (whether a fault changed a value or not) against it. In particular, we extend the idea of statistical ineffective fault attacks (SIFA) to target the initialization performed in nonce-based authenticated encryption schemes. By targeting the initialization performed during decryption/verification, most nonce-based authenticated encryption schemes provide the attacker with an oracle whether a fault was ineffective or not. This information is all the attacker needs to mount statistical ineffective fault attacks. To demonstrate the practical threat of the attack, we target software implementations of the authenticated encryption schemes Keyak and Ketje. The presented fault attacks can be carried out without the need of sophisticated equipment. In our practical evaluation the inputs corresponding to 24 ineffective fault inductions were required to reveal large parts of the secret key in both scenarios.
Original language | English |
---|---|
Title of host publication | Selected Areas in Cryptography – SAC 2018 |
Editors | Carlos Cid, Michael J. Jacobson |
Publisher | Springer |
Pages | 257-277 |
Number of pages | 21 |
ISBN (Electronic) | 978-3-030-10970-7 |
ISBN (Print) | 978-3-030-10969-1 |
DOIs | |
Publication status | Published - 2019 |
Publication series
Name | Lecture Notes in Computer Science |
---|---|
Volume | 11349 |
Keywords
- Fault Attack
- Statistical Ineffective Fault Attack
- SIFA
- Authenticated Encryption
- Keyak
- Ketje
- Statistical ineffective fault attack
- Authenticated encryption
- Fault attack
ASJC Scopus subject areas
- Theoretical Computer Science
- Computer Science(all)
Fingerprint
Dive into the research topics of 'Fault Attacks on Nonce-based Authenticated Encryption: Application to Keyak and Ketje'. Together they form a unique fingerprint.Projects
- 2 Finished
-
Espresso - Scalable hardware-secured authentication and personalization of intelligent sensor nodes
1/05/18 → 31/10/20
Project: Research project
-