Abstract:SHA-3, the latest hash standard from NIST, is utilized by numerous cryptographic algorithms to handle sensitive information. Consequently, SHA-3 has become a prime target for side-channel attacks, with numerous studies demonstrating successful breaches in unprotected implementations. Masking, a countermeasure capable of providing theoretical security, has been explored in various studies to protect SHA-3. However, masking for hardware implementations may significantly increase area costs and introduce additional delays, substantially impacting the speed and area of higher-level algorithms. In particular, current low-latency first-order masked SHA-3 hardware implementations require more than four times the area of unprotected implementations. To date, the specific structure of SHA-3 has not been thoroughly analyzed for exploitation in the context of masking design, leading to difficulties in minimizing the associated area costs using existing methods. We bridge this gap by conducting detailed leakage path and data dependency analyses on two-share masked SHA-3 implementations. Based on these analyses, we propose a compact and low-latency first-order SHA-3 masked hardware implementation, requiring only three times the area of unprotected implementations and almost no fresh random number demand. We also present a complete theoretical security proof for the proposed implementation in the glitch+register-transition-robust probing model. Additionally, we conduct leakage detection experiments using PROLEAD, TVLA and VerMI to complement the theoretical evidence. Compared to state-of-theart designs, our implementation achieves a 28% reduction in area consumption. Our design can be integrated into first-order implementations of higher-level cryptographic algorithms, contributing to a reduction in overall area costs.

Reliable SoC Design and Implementation of SHA-3-HMAC Algorithm with Attack Protection

An Efficient HMAC Processor Based on the SHA-3 HASH Function

A New Countermeasure Against Side Channel Attack for HMAC-SM3 Hardware

High-performance Implementation of an HMAC Processor Based on SHA-3 Hash Function

Correlation Power Attack on a Message Authentication Code Based on SM3.

Hardware Design of SHA-3 for PQC Classic McEliece

High Throughput Design and Implementation of SHA-3 Hash Algorithm

Hardware acceleration design of the SHA-3 for high throughput and low area on FPGA

High-speed Pipeline Design for HMAC of SHA-256 with Masking Scheme

Implementation of HMAC-SM3 Algorithm on FPGA

A Chosen - Plaintext Differential Power Analysis Attack on HMAC - SM3.

A First-Order Differential Power Analysis Attack on Hmac-Sm3

Design of Asynchronous High Throughput SHA-256 Hardware Accelerator in 40nm CMOS

Breaking Ground: A New Area Record for Low-Latency First-Order Masked SHA-3

FPGA Optimization and Implementation of HMAC-MD5 Algorithm

Parallel Implementations of SHA-3 on a 24-Core Processor with Software and Hardware Co-Design

Hardware Design and Implementation of SM3 Hash Algorithm for Financial IC Card

Design Exploration of SHA-3 ASIP for IoT on a 32-Bit RISC-V Processor

Research on Differential Power Analysis of Hmac-Sm3

Hardware implementation analysis of SHA-3 candidates algorithms

Design of SM3 Hardware Implementation with Integrated Message Padding