차분 계산 분석 대응을 위한 WBC-AES Dummy LUT 생성 방안 연구

Translated title of the contribution: A Study on Creating WBC-AES Dummy LUT as a Countermeasure against DCA

Research output: Contribution to journalArticlepeer-review

Abstract

A white-box environment refers to a situation where the internal information of an algorithm is disclosed. The AES white-box encryption was first announced in 2002, and in 2016, a side-channel analysis for white-box encryption called Differential Computation Analysis (DCA) was proposed. DCA analysis is a powerful side-channel attack technique that uses the memory information of white-box encryption as side-channel information to find the key. Although various countermeasure studies against DCA have been published domestically and internationally, there were no evaluated or analyzed results from experiments applying the hiding technique using dummy operations to DCA analysis. Therefore, in this paper, we insert LU T-shaped dummy operations into the WBC-AES algorithm proposed by S. Chow in 2002 and quantitatively evaluate the degree of change in DCA analysis response depending on the size of the dummy. Compared to the DCA analysis proposed in 2016, which recovers a total of 16 bytes of the key, the countermeasure proposed in this paper was unable to recover up to 11 bytes of the key as the size of the dummy decreased, resulting in a maximum decrease in attack performance of about 68.8%, which is about 31.2% lower than the existing attack performance. The countermeasure proposed in this paper confirms that the attack performance significantly decreases as smaller dummy sizes are inserted and can be applied in various fields.
Translated title of the contributionA Study on Creating WBC-AES Dummy LUT as a Countermeasure against DCA
Original languageKorean
Pages (from-to)363-374
Number of pages12
Journal정보보호학회논문지
Volume33
Issue number3
DOIs
StatePublished - 2023

Fingerprint

Dive into the research topics of 'A Study on Creating WBC-AES Dummy LUT as a Countermeasure against DCA'. Together they form a unique fingerprint.

Cite this