CCRI:Planning-C:SCA-in-Cloud: Infrastructure to Perform Side-Channel Attacks on Cryptographic Algorithms

CCRI:Planning-C:SCA-in-Cloud：对加密算法执行侧通道攻击的基础设施

• 批准号: 2213738
• 负责人: Miaoqing Huang
• 金额: $ 10万
• 依托单位: University of Arkansas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2213738&HistoricalAwards=false
• 关键词: CCRI; Planning; SCA; Cloud; Infrastructure

This project focuses on planning activities leading to the development of a remotely accessible research infrastructure for performing and analyzing side-channel attacks on cryptographic algorithms (SCA-in-Cloud). When commissioned, this infrastructure is envisioned serve as an open access platform for researchers to design and evaluate innovative SCA methods (e.g., timing, power-based) implemented in both hardware and software. The availability of this open infrastructure will also encourage more secure development practices and open new community-based research avenues to develop SCA-resistant implementations of next generation cryptographic algorithms. A key objective of this planning grant is to coalesce different groups (cryptography theorists, software engineers, embedded and real-time engineers, and cybersecurity practitioners) into a more visible community and solicit collaborators and feedback that is necessary to create this critical infrastructure.There are two major tasks in this planning project. The first major task includes a series of outreach activities for soliciting the interest, requirements, and the scope of the SCA-in-Cloud infrastructure. Outreach strategies include surveys and workshops at conferences for direct interactions and community building with all other cryptography active and aspirational research groups, and the National Institute of Standards and Technology (NIST). Further, an advisory committee will be formed for the initial determination of hardware/software platforms and known side-channel attacks included in the infrastructure. The second major task is to develop a prototype of the infrastructure, which will include FPGA and embedded development kits.This project will consistently integrate the project development with undergraduate and graduate research and education, and expose students early on to recent advances in security, software design, and hardware design. The proposed infrastructure will be used by the Embedded System Security course at the University of Arkansas for performing power-based side-channel attacks. Other institutions will be contacted to take advantage of this SCA-in-Cloud infrastructure. Women and underrepresented students will be encouraged to join the research team. Further, tutorials and demos will be organized at related conferences, such as FPGA, HOST, and Crypto for introducing the infrastructure to the research community.The website, https://sca-in-cloud.uark.edu, is dedicated to the portal to the infrastructure and the project repository for all data, code, results, and reports. All users will access the infrastructure through this website to perform side-channel attacks on cryptographic algorithms and obtain the results. The website and all project files will be stored on a desktop computer maintained by the research team for 3 years. In addition, a GitHub project will host all data, code results, and reports as a permanent solution, and will be linked to from the above URL.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该项目的重点是规划活动，以开发一个远程访问的研究基础设施，用于执行和分析对加密算法的侧信道攻击（SCA-in-Cloud）。当委托时，这个基础设施被设想为一个开放的访问平台，供研究人员设计和评估创新的SCA方法（例如，定时、基于功率）。 这种开放式基础设施的可用性还将鼓励更安全的开发实践，并开辟新的基于社区的研究途径，以开发下一代加密算法的抗SCA实现。该规划拨款的一个关键目标是将不同的群体（密码学理论家、软件工程师、嵌入式和实时工程师以及网络安全从业者）合并成一个更可见的社区，并征求合作者和创建此关键基础设施所需的反馈。该规划项目有两个主要任务。第一项主要任务包括一系列外展活动，以征集SCA云基础设施的兴趣、需求和范围。外联战略包括在会议上进行调查和研讨会，以便与所有其他活跃和有抱负的密码学研究团体以及美国国家标准与技术研究所（NIST）进行直接互动和社区建设。此外，将成立一个咨询委员会，初步确定硬件/软件平台和基础设施中包括的已知侧信道攻击。第二个主要任务是开发基础设施的原型，其中包括FPGA和嵌入式开发工具包。该项目将始终将项目开发与本科生和研究生的研究和教育相结合，并使学生尽早了解安全，软件设计和硬件设计的最新进展。拟议的基础设施将用于阿肯色州大学的嵌入式系统安全课程，用于执行基于功率的侧信道攻击。将联系其他机构以利用此SCA云基础设施。将鼓励妇女和代表性不足的学生加入研究小组。此外，还将在FPGA、HOST和Crypto等相关会议上组织教程和演示，向研究社区介绍基础设施。网站https://sca-in-cloud.uark.edu专门用于基础设施的门户网站和所有数据、代码、结果和报告的项目存储库。所有用户将通过本网站访问基础设施，对加密算法进行侧信道攻击并获得结果。网站和所有项目文件将存储在研究团队维护的台式计算机上3年。此外，GitHub项目将作为永久解决方案托管所有数据、代码结果和报告，并将从上述URL链接到该项目。该奖项反映了NSF的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Towards Cloud-based Infrastructure for Post-Quantum Cryptography Side-channel Attack Analysis

面向后量子密码学侧信道攻击分析的基于云的基础设施

• 发表时间: 2023
• 期刊: 2023 IEEE Design Methodologies Conference
• 作者: Teague, Tristen;Mahzabin, Mayeesha;Nelson, Alexander;Andrews, David;Huang, Miaoqing
• 通讯作者: Huang, Miaoqing

When Frodo Flips: End-to-End Key Recovery on FrodoKEM via Rowhammer

• DOI: 10.1145/3548606.3560673
• 发表时间: 2022-11
• 期刊: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security
• 作者: Michael Fahr;Hunter Kippen;Andrew Kwong;T. Dang;Jacob Lichtinger;Dana Dachman-Soled;Daniel Genkin;Alexander Nelson;Ray A. Perlner;Arkady Yerukhimovich;Daniel Apon