Information theoretical evaluation of the bucketing technique to mitigate timing attacks

Information theoretical evaluation of the bucketing technique to mitigate timing attacks
复制标题

DOI:
--
复制
发表时间:
2014-12
期刊:
2014 International Symposium on Information Theory and its Applications
影响因子:
--
通讯作者:
Yasuyuki Kobayashi;Y. Kaji;H. Seki
Yasuyuki Kobayashi;Y. Kaji;H. Seki
中科院分区:
其他
文献类型:
--
作者:
Yasuyuki Kobayashi;Y. Kaji;H. Seki

文献摘要

相似文献

定时攻击被认为是对许多实用安全机制的严重威胁。然而,由于我们无法预测攻击者的能力和行为,因此很难估计攻击的风险。为了解决这个问题,KöPF等人。重点关注攻击者获取的密钥和计时观测之间的相互信息。任何攻击者都不可能学习到比互信息更多的信息,对这种方法的讨论给出了定时攻击的风险的一定上界。Ko,̈,PF等人。采用这种方法来评估他们提出的一种分组技术的贡献。然而,其中的数学讨论还需要进一步改进。这项研究的目的是提炼KöPF的讨论,并更准确地理解Ko Bicking技术的贡献。
Timing attack are regarded as serious threats to many practical security mechanisms. However, it is difficult to estimate the risk of attack because we cannot predict the ability and the behavior of attackers. To tackle this issue, Köpf et al. focus on the mutual information between a secret key and timing observations that an attacker acquires. Any attacker cannot learn more information than the mutual information, and the discussion of this approach gives a certain upperbound on the risk of timing attacks. Köpf et al. adopted this approach to evaluate the contribution of a bucketing technique that was proposed by themselves. However, the mathematical discussion therein needs more improvement. The purpose of this study is to refine the discussion of Köpf, and give more precise understanding of the contribution of the bucketing technique.