Time is money, friend! Timing Side-channel Attack against Garbled Circuit Constructions
Time is money, friend! Timing Side-channel Attack against Garbled Circuit Constructions
复制标题
DOI：
10.1007/978-3-031-54776-8_13
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
M. Hashemi;Domenic Forte;F. Ganji
中科院分区：
文献类型：
--
作者：
M. Hashemi;Domenic Forte;F. Ganji
随着安全函数计算（SFE）的出现，不信任的各方可以联合计算他们的私人输入，而不会透露除了结果之外的任何东西。Yao的乱码电路协议已经成为安全计算的一个组成部分，这要归功于为使其可行、实用和更有效所做的大量努力。几十年来，通用编译器中提供的协议的安全性已经在可靠的证明和在计算过程中不会泄漏各方输入信息的承诺方面得到了保证。在一个并行的努力中，定时侧信道攻击已经证明了自己在从实现中检索秘密方面的有效性，即使是通过远程访问它们。然而，令人惊讶的是，在文献中从未讨论过乱码电路框架对定时攻击的脆弱性。本文介绍了Goblin，第一个针对常用乱码电路框架的定时攻击。Goblin是一种机器学习辅助的、非剖析的、单迹定时侧信道攻击（SCA），它在不同的场景下成功地恢复了计算过程中的乱码输入，包括各种乱码框架、基准函数和乱码输入位数。通过这样做，Goblin希望为这一问题的进一步研究铺平道路。
With the advent of secure function evaluation (SFE), distrustful parties can jointly compute on their private inputs without disclosing anything besides the results. Yao’s garbled circuit protocol has become an integral part of secure computation thanks to considerable efforts made to make it feasible, practical, and more efficient. For decades, the security of protocols offered in general-purpose compilers has been assured with regard to sound proofs and the promise that during the computation, no information on parties’ input would be leaking. In a parallel effort, timing side-channel attacks have proven themselves effective in retrieving secrets from implementations, even through remote access to them. Nevertheless, the vulnerability of garbled circuit frameworks to timing attacks has, surprisingly, never been discussed in the literature. This paper introduces Goblin, the first timing attack against commonly employed garbled circuit frameworks. Goblin is a machine learning-assisted, non-profiling, single-trace timing side-channel attack (SCA), which successfully recovers the garbler’s input during the computation under different scenarios, including various garbling frameworks, benchmark functions, and the number of garbler’s input bits. In doing so, Goblin hopefully paves the way for further research in this matter.