Abstract:Code-based masking is a highly generalized type of masking schemes, which can be instantiated into specific cases by assigning different encoders. It captivates by its side-channel resistance against higher-order attacks and the potential to withstand fault injection attacks. However, similar to other algebraically-involved masking schemes, code-based masking is also burdened with expensive computational overhead. To mitigate such cost and make it efficient, we contribute to several improvements to the original scheme proposed by Wang et al. in TCHES 2020. Specifically, we devise a computationally friendly encoder and accordingly accelerate masked gadgets to leverage efficient implementations. In addition, we highlight that the amortization technique introduced by Wang et al. does not always lead to efficient implementations as expected, but actually decreases the efficiency in some cases. From the perspective of practical security, we carry out an extensive evaluation of the concrete security of code-based masking in the real world. On one hand, we select three representative variations of code-based masking as targets for an extensive evaluation. On the other hand, we aim at security assessment of both encoding and computations to investigate whether the state-of-the-art computational framework for code-based masking reaches the security of the corresponding encoding. By leveraging both leakage assessment tool and side-channel attacks, we verify the existence of “security order amplification” in practice and validate the reliability of the leakage quantification method proposed by Cheng et al. in TCHES 2021. In addition, we also study the security decrease caused by the “cost amortization” technique and redundancy of code-based masking. We identify a security bottleneck in the gadgets computations which limits the whole masked implementation. To the best of our knowledge, this is the first time that allows us to narrow down the gap between the theoretical security order under the probing model (sometimes with simulation experiments) and the concrete side-channel security level of protected implementations by code-based masking in practice.

Design of a Masked S-Box for SM4 Based on Composite Field.

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

Design and Implementation of Generic Low-entropy High-order Composite Field Based Masking Scheme

Design and Implementation of SM4 Block Cipher Based on Composite Field

An Efficient Masked White-Box Implementation of SM4

Boolean Matrix Masking for SM4 Block Cipher Algorithm.

A Compact Implementation of Masked AES S-Box

Low-cost hardware implementation of SM4 based on composite field

Hardware Implementation of SM4 Based on Composite Filed S-box and It's Security against Machine Learning Attack

A new algorithm of S-box for hardware implementation of SMS4

Dynamic Inhomogeneous S-Boxes Design for Efficient AES Masking Mechanisms

The Application of Hypercube Method in S Box of SM4

Side-channel Attack-Resistant AES S-box with Hidden Subfield Inversion and Glitch-Free Masking

On Efficient and Secure Code-based Masking: A Pragmatic Evaluation.

An Implementation Algorithm of S-Box Based on Inverse Transformation in Galois Field

Application of the Composite Field in the Design of an Improved AES S-box Based on Inversion

Low-Cost Energy-Efficient Side-Channel Attacks Resistant AES S-Box with Power-Aware Hiding Inverter in GF(2^4).

AES S-Box Circuit Implementation Based on Composite Field Arithmetic

A Lightweight Nonlinear White-Box SM4 Implementation Applied to Edge IoT Agents.

A Low Critical Path Delay Structure For Composite Field Aes S-Box Based On Constant Matrices Multiplication Merging

Dynamic inhomogeneous S-Boxes in AES: a novel countermeasure against power analysis attacks