Decomposing the Inverse of a Masked Vector in an Isomorphic Galois Field for Perfectly Masked S-Box
Decomposing the Inverse of a Masked Vector in an Isomorphic Galois Field for Perfectly Masked S-Box
复制标题
DOI：
10.1109/candar.2019.00027
复制
发表时间：
2019-11
期刊：
影响因子：
--
通讯作者：
Yuta Kodera;Yuki Taketa;Takuya Kusaka;Y. Nogami
中科院分区：
文献类型：
--
作者：
Yuta Kodera;Yuki Taketa;Takuya Kusaka;Y. Nogami
使用机器学习（ML）技术的机会的增加给密码系统带来了新的威胁。作为一个显著的例子，ML技术已经逐渐被用于侧信道攻击（SCA）以获取敏感信息。在本文中，作者专注于AES中的掩蔽S盒的结构，其目的是即使对于使用ML技术的攻击，也能够抵抗SCA。更准确地说，本文分析了在F_（2^4）^2上的逆运算的数学结构，这是一个同构域，以获得高效的AES算法，使加密方案中的所有函数都可以处理屏蔽数据。通过引入高斯周期和Itoh-Tsujii反演算法等数学工具实现了该数学结构，并由此明确了元素A <$F_（2^4）^2的A^-1系数的因子。它使我们能够直接生成相应的元素，即使在处理Substance之后也可以取消掩码。
The increment of opportunities for using machine learning (ML) technologies has brought a new threat to cryptosystems. As a remarkable example, the ML technologies have gradually been employed in the side-channel attack (SCA) to obtain sensitive information. In this paper, the authors focus on the structure of a masked S-Box in AES, which aims to equip the SCA resistance even for the attacks using the ML technologies. More precisely, this paper analyzes the mathematical structure of the inverse operation over F_(2^4)^2 which is an isomorphic field for obtaining efficient arithmetic for the AES, so that all functions in the encryption scheme can handle masked data as it is. The mathematical structure is realized by introducing several mathematical tools such as the Gauss periods and the Itoh-Tsujii inversion algorithm, and as a result, we clarified the factors of the coefficients of A^-1 for an element A ∊ F_(2^4)^2. It enables us to generate the corresponding element directly, which allows canceling the mask even after processing the SubBytes.