Abstract:White-box cryptography (WBC) aims to resist attacks from attackers who can control all the implementation details of cryptographic schemes. In 2009, Saxena et al. proposed a fundamental of white-box cryptography via the notion “white-box property” (WBP). Under this model, they proved that there do not exist obfuscators that can satisfy every security notion for a program (the negative result). On the other hand, they proved that there exists an obfuscator satisfying WBP for some security notion (the positive result). These contributions provide us a general cognition of WBC, which is big progress for the theoretical research. To better understand them, we make discussion on each result and achieve some new results. For the negative result, we prove that insufficiently secure obfuscator is the real cause of the negative result. We point out that the security of a white-box scheme cannot be guaranteed if it is instantiated by a less secure obfuscator, since the obfuscator used in their proof does not satisfy the “Virtual Black-box Property” with auxiliary input. From our proof, we also conclude that the notion WBP is equal to “Virtual Black-box Property with auxiliary input”. For the positive result, we prove that security notion under black-box model should not be used in white-box context without any modification; although the positive result is meaningful, it is unlikely to prove that an obfuscator satisfies WBP for IND-CPA, since the security notion “IND-CPA” is under black-box model, which has different adversary with WBP.

Several Methods for Constructing White-box Solutions

Design and Study of White-Box Cryptography

A Secure Scan Method for Crypto Chips

A New White-Box Cryptographic Scheme

A Generic Attack Against White Box Implementation of Block Ciphers

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

Efficient Attack to WhiteBox SMS 4 Implementation

Discussion on the Theoretical Results of White-Box Cryptography

A New Feistel-Type White-Box Encryption Scheme

Software Tamper Resistance Based on White-Box SMS4 Implementation.

A White-Box SM4 Implementation by Introducing Pseudo States Applied to Edge IoT Agents

White-Box Implementation of the Identity-Based Signature Scheme in the IEEE P1363 Standard for Public Key Cryptography

A New Attempt of White-Box AES Implementation

A White-Box Implementation of IDEA

A Lightweight Nonlinear White-Box SM4 Implementation Applied to Edge IoT Agents.

Security Evaluation and Improvement of a White-Box SMS4 Implementation Based on Affine Equivalence Algorithm.

Low-cost Design of Stealthy Hardware Trojan for Bit-Level Fault Attacks on Block Ciphers

A White-Box-Cryptography-Based Scheme for the Secure Chip of DCAS Terminal

An analytical review of current S-box design methodologies, performance evaluation criteria, and major challenges

A White-Box Encryption Algorithm for Computing with Mobile Agents

A New S-Box Generation Method and Advanced Design Based on Combined Chaotic System