Abstract:Code-based masking is a highly generalized type of masking schemes, which can be instantiated into specific cases by assigning different encoders. It captivates by its side-channel resistance against higher-order attacks and the potential to withstand fault injection attacks. However, similar to other algebraically-involved masking schemes, code-based masking is also burdened with expensive computational overhead. To mitigate such cost and make it efficient, we contribute to several improvements to the original scheme proposed by Wang et al. in TCHES 2020. Specifically, we devise a computationally friendly encoder and accordingly accelerate masked gadgets to leverage efficient implementations. In addition, we highlight that the amortization technique introduced by Wang et al. does not always lead to efficient implementations as expected, but actually decreases the efficiency in some cases. From the perspective of practical security, we carry out an extensive evaluation of the concrete security of code-based masking in the real world. On one hand, we select three representative variations of code-based masking as targets for an extensive evaluation. On the other hand, we aim at security assessment of both encoding and computations to investigate whether the state-of-the-art computational framework for code-based masking reaches the security of the corresponding encoding. By leveraging both leakage assessment tool and side-channel attacks, we verify the existence of “security order amplification” in practice and validate the reliability of the leakage quantification method proposed by Cheng et al. in TCHES 2021. In addition, we also study the security decrease caused by the “cost amortization” technique and redundancy of code-based masking. We identify a security bottleneck in the gadgets computations which limits the whole masked implementation. To the best of our knowledge, this is the first time that allows us to narrow down the gap between the theoretical security order under the probing model (sometimes with simulation experiments) and the concrete side-channel security level of protected implementations by code-based masking in practice.

On the Privacy of Matrix Masking-Based Verifiable (Outsourced) Computation

EPVM: efficient and publicly verifiable computation for matrix multiplication with privacy preservation

Privacy Preserving PCA for Multiparty Modeling

Outsourcing Eigen-Decomposition and Singular Value Decomposition of Large Matrix to a Public Cloud

Private Outsourcing of Polynomial Evaluation and Matrix Multiplication using Multilinear Maps

An Efficient Matrix Multiplication with Enhanced Privacy Protection in Cloud Computing and Its Applications

Outsourcing Large-Scale Quadratic Programming to A Public Cloud

Privacy preserving, verifiable and efficient outsourcing algorithm for matrix multiplication to a malicious cloud server

Secure And Verifiable Outsourcing Of Large-Scale Matrix Inversion Without Precondition In Cloud Computing

EPP-DMM: An Efficient and Privacy-Protected Delegation Scheme for Matrix Multiplication

Secure and Verifiable Outsourcing Algorithm for Large-Scale Matrix Multiplication on Public Cloud Server

A rational and reliable model for outsourcing polynomial two-party computation

On Efficient and Secure Code-based Masking: A Pragmatic Evaluation.

Verifiable Private Multi-Party Computation: Ranging and Ranking

Secure and Efficient Outsourcing of Large-Scale Matrix Inverse Computation

Secure and efficient protocol for outsourcing large matrix determinant computation to semi-honest cloud

Data Obfuscation for Privacy and Confidentiality in Cloud Computing

Low-Complexity Cloud Image Privacy Protection via Matrix Perturbation

Privacy-Preserving Nonlinear Cloud-based Model Predictive Control via Affine Masking

Verifiable computation over encrypted data via MPC-in-the-head zero-knowledge proofs

Information-Theoretically Private Matrix Multiplication From MDS-Coded Storage