Abstract:Code-based masking is a highly generalized type of masking schemes, which can be instantiated into specific cases by assigning different encoders. It captivates by its side-channel resistance against higher-order attacks and the potential to withstand fault injection attacks. However, similar to other algebraically-involved masking schemes, code-based masking is also burdened with expensive computational overhead. To mitigate such cost and make it efficient, we contribute to several improvements to the original scheme proposed by Wang et al. in TCHES 2020. Specifically, we devise a computationally friendly encoder and accordingly accelerate masked gadgets to leverage efficient implementations. In addition, we highlight that the amortization technique introduced by Wang et al. does not always lead to efficient implementations as expected, but actually decreases the efficiency in some cases. From the perspective of practical security, we carry out an extensive evaluation of the concrete security of code-based masking in the real world. On one hand, we select three representative variations of code-based masking as targets for an extensive evaluation. On the other hand, we aim at security assessment of both encoding and computations to investigate whether the state-of-the-art computational framework for code-based masking reaches the security of the corresponding encoding. By leveraging both leakage assessment tool and side-channel attacks, we verify the existence of “security order amplification” in practice and validate the reliability of the leakage quantification method proposed by Cheng et al. in TCHES 2021. In addition, we also study the security decrease caused by the “cost amortization” technique and redundancy of code-based masking. We identify a security bottleneck in the gadgets computations which limits the whole masked implementation. To the best of our knowledge, this is the first time that allows us to narrow down the gap between the theoretical security order under the probing model (sometimes with simulation experiments) and the concrete side-channel security level of protected implementations by code-based masking in practice.

One Fault is All It Needs: Breaking Higher-Order Masking with Persistent Fault Analysis

Double Laser-Faults Based PFA on Cryptographic Circuits with Algebraic Analysis

Persistent Fault Attack in Practice

Improvements and recent updates of persistent fault analysis on block ciphers

Key Schedule Guided Persistent Fault Attack

A Fast-Detection and Fault-Correction Algorithm Against Persistent Fault Attack

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

SPFA: SFA on Multiple Persistent Faults

Theoretical Analysis of Persistent Fault Attack

On Efficient and Secure Code-based Masking: A Pragmatic Evaluation.

Efficient Persistent Fault Analysis with Small Number of Chosen Plaintexts

Free Fault Leakages for Deep Exploitation: Algebraic Persistent Fault Analysis on Lightweight Block Ciphers.

Fault Rate Analysis: Breaking Masked AES Hardware Implementations Efficiently

Low-cost Design of Stealthy Hardware Trojan for Bit-Level Fault Attacks on Block Ciphers

Pushing the Limit of PFA: Enhanced Persistent Fault Analysis on Block Ciphers

Fault-propagate Pattern Based DFA on PRESENT and PRINTcipher

Quasi-linear masking against SCA and FIA, with cost amortization

A Comprehensive Study of Algebraic Fault Analysis on PRINCE

Improvement and Evaluation for Algebraic Fault Attacks on PRESENT

A Framework for the Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

RAFA: Redundancies-assisted Algebraic Fault Analysis and its implementation on SPN block ciphers.