A Side-Channel Analysis Resistant Description of the AES S-Box

ME Oswald; S Mangard; N Pramstaller; V Rijmen

doi:10.1007/11502760_28

A Side-Channel Analysis Resistant Description of the AES S-Box

ME Oswald, S Mangard, N Pramstaller, V Rijmen

Department of Computer Science

Research output: Contribution to journal › Article (Academic Journal) › peer-review

212 Citations (Scopus)

Abstract

So far, efficient algorithmic countermeasures to secure the AES algorithm against (first-order) differential side-channel attacks have been very expensive to implement. In this article, we introduce a new masking countermeasure which is not only secure against first-order side-channel attacks, but which also leads to relatively small implementations compared to other masking schemes implemented in dedicated hardware. Our approach is based on shifting the computation of the finite field inversion in the AES S-box down to GF(4). In this field, the inversion is a linear operation and therefore it is easy to mask. Summarizing, the new masking scheme combines the concepts of multiplicative and additive masking in such a way that security against first-order side-channel attacks is maintained, and that small implementations in dedicated hardware can be achieved.

Translated title of the contribution	A Side-Channel Analysis Resistant Description of the AES S-Box
Original language	English
Pages (from-to)	413 - 423
Number of pages	11
Journal	Lecture Notes in Computer Science
DOIs	https://doi.org/10.1007/11502760_28
Publication status	Published - Feb 2005

Bibliographical note

Editors: Gilbert, H and Handschuh, H
ISBN: 9783540265412
Publisher: Springer
Name and Venue of Conference: Fast Software Encryption: 12th International Workshop, FSE 2005, Paris, 21-23 February
Conference Organiser: IACR

Access to Document

10.1007/11502760_28

http://www.springerlink.com/content/a6l78d92g7459rk7

Cite this

@article{4535150732e948c5b86033ac9167d888,

title = "A Side-Channel Analysis Resistant Description of the AES S-Box",

abstract = "So far, efficient algorithmic countermeasures to secure the AES algorithm against (first-order) differential side-channel attacks have been very expensive to implement. In this article, we introduce a new masking countermeasure which is not only secure against first-order side-channel attacks, but which also leads to relatively small implementations compared to other masking schemes implemented in dedicated hardware. Our approach is based on shifting the computation of the finite field inversion in the AES S-box down to GF(4). In this field, the inversion is a linear operation and therefore it is easy to mask. Summarizing, the new masking scheme combines the concepts of multiplicative and additive masking in such a way that security against first-order side-channel attacks is maintained, and that small implementations in dedicated hardware can be achieved.",

author = "ME Oswald and S Mangard and N Pramstaller and V Rijmen",

note = "Editors: Gilbert, H and Handschuh, H ISBN: 9783540265412 Publisher: Springer Name and Venue of Conference: Fast Software Encryption: 12th International Workshop, FSE 2005, Paris, 21-23 February Conference Organiser: IACR",

year = "2005",

month = feb,

doi = "10.1007/11502760_28",

language = "English",

pages = "413 -- 423",

journal = "Lecture Notes in Computer Science ",

issn = "0302-9743",

publisher = "Springer Berlin Heidelberg",

}

TY - JOUR

T1 - A Side-Channel Analysis Resistant Description of the AES S-Box

AU - Oswald, ME

AU - Mangard, S

AU - Pramstaller, N

AU - Rijmen, V

N1 - Editors: Gilbert, H and Handschuh, H ISBN: 9783540265412 Publisher: Springer Name and Venue of Conference: Fast Software Encryption: 12th International Workshop, FSE 2005, Paris, 21-23 February Conference Organiser: IACR

PY - 2005/2

Y1 - 2005/2

N2 - So far, efficient algorithmic countermeasures to secure the AES algorithm against (first-order) differential side-channel attacks have been very expensive to implement. In this article, we introduce a new masking countermeasure which is not only secure against first-order side-channel attacks, but which also leads to relatively small implementations compared to other masking schemes implemented in dedicated hardware. Our approach is based on shifting the computation of the finite field inversion in the AES S-box down to GF(4). In this field, the inversion is a linear operation and therefore it is easy to mask. Summarizing, the new masking scheme combines the concepts of multiplicative and additive masking in such a way that security against first-order side-channel attacks is maintained, and that small implementations in dedicated hardware can be achieved.

AB - So far, efficient algorithmic countermeasures to secure the AES algorithm against (first-order) differential side-channel attacks have been very expensive to implement. In this article, we introduce a new masking countermeasure which is not only secure against first-order side-channel attacks, but which also leads to relatively small implementations compared to other masking schemes implemented in dedicated hardware. Our approach is based on shifting the computation of the finite field inversion in the AES S-box down to GF(4). In this field, the inversion is a linear operation and therefore it is easy to mask. Summarizing, the new masking scheme combines the concepts of multiplicative and additive masking in such a way that security against first-order side-channel attacks is maintained, and that small implementations in dedicated hardware can be achieved.

U2 - 10.1007/11502760_28

DO - 10.1007/11502760_28

M3 - Article (Academic Journal)

SP - 413

EP - 423

JO - Lecture Notes in Computer Science

JF - Lecture Notes in Computer Science

SN - 0302-9743

ER -

A Side-Channel Analysis Resistant Description of the AES S-Box

Abstract

Bibliographical note

Access to Document

Fingerprint

Cite this