Abstract:The implementations of post-quantum cryptographic algorithms have been newly explored, whereas, the protection against side-channel attacks shall be considered upfront, since it can have a non-negligible impact on security and performance. In this article, the security of supersingular isogeny key encapsulation (SIKE), a second-round candidate of NIST's on-going post-quantum standardization process, is thoroughly evaluated under side-channel analysis. First, the vulnerabilities of reference and optimized implementations of SIKE are thoroughly analyzed in terms of both horizontal and vertical side-channel leakage. After the optimized SIKE, which is based on Three-point Montgomery Differential Ladder algorithm, is proved to be constant-time and there is no horizontal leakage, a vertical vulnerability is analyzed based on the source code at the algorithmic level, and a theoretical differential power analysis (DPA) attack is proposed. In order to exploit this vulnerability, the differential electromagnetic attack (DEMA) is put into practice to extract the private key of SIKE based on a 32-bit ARM platform. To the best of our knowledge, this is the first practical side-channel attack at SIKE implemented on real ARM-based devices. Our experiments show that the DEMA needs only hundreds of electromagnetic traces to carry out the attack. More importantly, an efficient window-based countermeasure is proposed to eliminate the vertical leakage and prevent side-channel attacks with only a little overhead. The security of our countermeasure is carefully evaluated against most of well-known power analysis attacks. Through careful evaluation and comparison with other countermeasures, this method can lead to higher security at a very small cost in terms of time and memory.

Small Tweaks Do Not Help: Differential Power Analysis of MILENAGE Implementations in 3G/4G USIM Cards

A Study on Differential Power Analysis Attacks Against Smart-Card

Side-Channel Analysis for the Authentication Protocols of CDMA Cellular Networks

A Security Research on Side Channel Analysis of 5G USIM Card

Breaking real-world COTS USIM cards with unknown side-channel countermeasures

On the Need of Physical Security for Small Embedded Devices: a Case Study with COMP128-1 Implementations in SIM Cards.

Power Side Channels in Security ICs: Hardware Countermeasures

Securing SMS4 cipher against differential power analysis and its VLSI implementation

SecureSIM

A Power Analysis on SMS4 Using the Chosen Plaintext Method

Research on Differential Power Analysis Attack on SMS4 Algorithm

Implementation of Security System for 3G USIM Card

Software Hardware Co-design for Side-Channel Analysis Platform on Security Chips.

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2

Study on power analysis and related countermeasures

A Differential Power Analysis Attack on Dynamic Password Token Based on SM3 Algorithm

Design and implementation of a Differential Power Analysis System for cryptographic devices

Differential Power Analysis on Dynamic Password Token Based on SM3 Algorithm, and Countermeasures

Electromagnetic Equalizer: An Active Countermeasure Against EM Side-channel Attack

Side-Channel Analysis and Countermeasure Design on ARM-Based Quantum-Resistant SIKE

Distributed power analysis attack on SM4 encryption chip