Abstract:Public key cryptographic（PKC） algorithms, such as the RSA, elliptic curve digital signature algorithm（ECDSA） etc., are widely used in the secure communication systems, such as OpenSSL, and a variety of information security systems. If designer do not securely implement them, the secret key will be easily extracted by side-channel attacks（SCAs） or combinational SCA thus mitigating the security of the entire communication system. Previous countermeasures of PKC implementations focused on the core part of the algorithms and ignored the modular inversion which is widely used in various PKC schemes. Many researchers believe that instead of straightforward implementation, constant time modular inversion（CTMI） is enough to resist the attack of simple power analysis combined with lattice analysis. However, we find that the CTMI security can be reduced to a hidden t-bit multiplier problem. Based on this feature, we firstly obtain Hamming weight of intermediate data through side-channel leakage. Then, we propose a heuristic algorithm to solve the problem by revealing the secret（partial and full） base of CTMI. Comparing previous nec-essary input message for masking filtering, our procedure need not any information about the secret base of the inversion. To our knowledge, this is the first time for evaluating the practical security of CTMI and experimental results show the fact that CTMI is not enough for high-level secure communication systems.

Note to the Authentication Operate Modes of Block Cipher and Provable Security

A New Message Authentication Code and Its Security Proof

A First Step to Provable Security in Block Ciphers against Side Channel Attacks

Authenticated Encryption Modes Based on Block Ciphers

A Parallelizable Message Authentication Code

On the Techniques of Enhancing the Security of Block Ciphers.

Integrity-protecting block cipher modes -- Untangling a tangled web

On the Security of Encrypt-and-MAC Paradigm

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

A New Security Analysis for XOR Message Authentication Code

Quantitative Evaluation of Chaotic CBC Mode of Operation

Side-Channel Cube Attacks on EPCBC

Proving chaotic behaviour of CBC mode of operation

Processing Analysis of Confidential Modes of Operation.

To Construct High Level Secure Communication System: CTMI is Not Enough

A Middleware Design for Block Cipher Seamless Connected into Stream Cipher Mode

A New Analysis Method of Cryptographic Protocols

Further Analysis of Block Ciphers Against Timing Attacks

The dynamics of the CBC Mode of Operation

Provably Secure User Authentication and Key Agreement Scheme for Wireless Sensor Networks

Multi-user Security of the Tweakable Even-Mansour Cipher