Abstract:Code-based masking is a highly generalized type of masking schemes, which can be instantiated into specific cases by assigning different encoders. It captivates by its side-channel resistance against higher-order attacks and the potential to withstand fault injection attacks. However, similar to other algebraically-involved masking schemes, code-based masking is also burdened with expensive computational overhead. To mitigate such cost and make it efficient, we contribute to several improvements to the original scheme proposed by Wang et al. in TCHES 2020. Specifically, we devise a computationally friendly encoder and accordingly accelerate masked gadgets to leverage efficient implementations. In addition, we highlight that the amortization technique introduced by Wang et al. does not always lead to efficient implementations as expected, but actually decreases the efficiency in some cases. From the perspective of practical security, we carry out an extensive evaluation of the concrete security of code-based masking in the real world. On one hand, we select three representative variations of code-based masking as targets for an extensive evaluation. On the other hand, we aim at security assessment of both encoding and computations to investigate whether the state-of-the-art computational framework for code-based masking reaches the security of the corresponding encoding. By leveraging both leakage assessment tool and side-channel attacks, we verify the existence of “security order amplification” in practice and validate the reliability of the leakage quantification method proposed by Cheng et al. in TCHES 2021. In addition, we also study the security decrease caused by the “cost amortization” technique and redundancy of code-based masking. We identify a security bottleneck in the gadgets computations which limits the whole masked implementation. To the best of our knowledge, this is the first time that allows us to narrow down the gap between the theoretical security order under the probing model (sometimes with simulation experiments) and the concrete side-channel security level of protected implementations by code-based masking in practice.

A Novel Model for Resisting Side Channel Attack by Masking of Gates

BoMaNet: Boolean Masking of an Entire Neural Network

Comparison of Some Mask Protections of Des Against Power Analysis

Dual-rail random switching logic: a countermeasure to reduce side channel leakage

A Novel Trojan Side Channel for Attacking Masking

On Efficient and Secure Code-based Masking: A Pragmatic Evaluation.

Guarding Machine Learning Hardware Against Physical Side-channel Attacks

An Efficient Window-Based Countermeasure to Power Analysis of ECC Algorithms

Power Analysis Attacks on ECC Randomized Automata

A Power Analysis Attack Countermeasure Based on Random Data Path Execution for CGRA.

Power Side Channels in Security ICs: Hardware Countermeasures

A Block Cipher Circuit Design against Power Analysis

Quantitative Verification of Masked Arithmetic Programs against Side-Channel Attacks

Power analysis resistant AES crypto engine design and FPGA implementation for a network security co-processor

On the Leakage between Arithmetic Components of DES Algorithm

Practical aspects on non-profiled deep-learning side-channel attacks against AES software implementation with two types of masking countermeasures including RSM

Circuit Masking: From Theory to Standardization, A Comprehensive Survey for Hardware Security Researchers and Practitioners

Tiny Security Hole: First-Order Vulnerability of Masked SEED and Its Countermeasure

A Methodology for Optimized Design of Secure Differential Logic Gates for DPA Resistant Circuits

Securing Cloud FPGAs Against Power Side-Channel Attacks: A Case Study on Iterative AES

Analysis of Multiplicative Low Entropy Masking Schemes Against Correlation Power Attack