Abstract:Code-based masking is a highly generalized type of masking schemes, which can be instantiated into specific cases by assigning different encoders. It captivates by its side-channel resistance against higher-order attacks and the potential to withstand fault injection attacks. However, similar to other algebraically-involved masking schemes, code-based masking is also burdened with expensive computational overhead. To mitigate such cost and make it efficient, we contribute to several improvements to the original scheme proposed by Wang et al. in TCHES 2020. Specifically, we devise a computationally friendly encoder and accordingly accelerate masked gadgets to leverage efficient implementations. In addition, we highlight that the amortization technique introduced by Wang et al. does not always lead to efficient implementations as expected, but actually decreases the efficiency in some cases. From the perspective of practical security, we carry out an extensive evaluation of the concrete security of code-based masking in the real world. On one hand, we select three representative variations of code-based masking as targets for an extensive evaluation. On the other hand, we aim at security assessment of both encoding and computations to investigate whether the state-of-the-art computational framework for code-based masking reaches the security of the corresponding encoding. By leveraging both leakage assessment tool and side-channel attacks, we verify the existence of “security order amplification” in practice and validate the reliability of the leakage quantification method proposed by Cheng et al. in TCHES 2021. In addition, we also study the security decrease caused by the “cost amortization” technique and redundancy of code-based masking. We identify a security bottleneck in the gadgets computations which limits the whole masked implementation. To the best of our knowledge, this is the first time that allows us to narrow down the gap between the theoretical security order under the probing model (sometimes with simulation experiments) and the concrete side-channel security level of protected implementations by code-based masking in practice.

Combining MILP modeling with algebraic bias evaluation for linear mask search: improved fast correlation attacks on SNOW

Modeling Linear and Non-linear Layers: An MILP Approach Towards Finding Differential and Impossible Differential Propagations

Efficient Algorithms for Modeling SBoxes Using MILP

Inner Product Masking for Bitslice Ciphers and Security Order Amplification for Linear Leakages.

On Efficient and Secure Code-based Masking: A Pragmatic Evaluation.

Quasi-linear masking against SCA and FIA, with cost amortization

Improved Low-Entropy Masking Scheme For Led With Mitigation Against Correlation-Enhanced Collision Attacks

Differential and Linear Cryptanalysis Using Mixed-Integer Linear Programming

Improved MILP Modeling for Automatic Security Evaluation and Application to FOX.

MILP/MIQCP-Based Fully Automatic Method of Searching for Differential-Linear Distinguishers for SIMON-Like Ciphers

Enhancing the MILP/MIQCP-based Automatic Search for Differential-Linear Distinguishers of Simon-Like Ciphers

Snowball: Another View on Side-Channel Key Recovery Tools.

Boolean Matrix Masking for SM4 Block Cipher Algorithm.

Analysis of Multiplicative Low Entropy Masking Schemes Against Correlation Power Attack

Automated Search Oriented to Key Recovery on Ciphers with Linear Key Schedule

Area-efficient Polynomial Modular Multiplication over GF(2∧n) and Application to AES

A Hybrid Approach to Formal Verification of Higher-Order Masked Arithmetic Programs

An Efficient Masked White-Box Implementation of SM4

Automated Search Oriented To Key Recovery On Ciphers With Linear Key Schedule Applications To Boomerangs In Skinny And Forkskinny

A Scheme to resist Fast Correlation Attack for Word Oriented LFSR based Stream Cipher

Applying MILP Method to Searching Integral Distinguishers Based on Division Property for 6 Lightweight Block Ciphers.