权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Leakage Aware Design Automation (LADA): Tools & Techniques for Software Crypto Implementations

泄漏感知设计自动化 (LADA)：工具

基本信息

批准号：
EP/N011635/1
负责人：
Daniel Page
金额：
$ 146.64万
依托单位：
University of Bristol
依托单位国家：
英国
项目类别：
Research Grant
财政年份：
2016
资助国家：
英国
起止时间：
2016 至无数据
项目状态：
已结题

来源：
https://gtr.ukri.org/projects?ref=EP%2FN011635%2F1
关键词：
Leakage Aware Design Automation LADA

项目摘要

Information leakage via side channels is a widely recognised threat to cyber security: in particular small devices are known to leak information via physical channels (power consumption, electromagnetic radiation, and timing behaviour). Side channel leakage provides skilled adversaries with information about otherwise secret internal variables, which can ultimately lead to complete security breaches in the form of secret key (or data) recovery. For small embedded devices, which feature architectures of limited complexity (i.e. a small number of pipeline stages, few data and/or address buses), the nature of the leakages can be appropriately modelled using statistical tools such as regression analysis or by estimating (multivariate) normal distributions. Our research hypothesis is that one can make meaningful statements about the leakage behaviour of new implementations on such devices by utilising a priori derived (instruction level) leakage models. Aiming to allow engineers with limited domain-specific knowledge to do just this, and hence improve the quality of software they develop, our overarching goal is: based on the development of a suitable instruction-level leakage model (for a device) plus specification of cryptographic primitives, we will explore techniques that allow sound assessment of leakage-related attacks on associated implementations without the need for a fully equipped side channel lab.

通过侧通道的信息泄漏是对网络安全的广泛认可的威胁：特别是已知小型设备通过物理通道（功耗，电磁辐射和定时行为）泄漏信息。侧信道泄漏为熟练的攻击者提供了有关秘密内部变量的信息，这最终可能导致以密钥（或数据）恢复形式的完全安全漏洞。对于小型嵌入式设备，其特征在于有限复杂性的架构（即，少量的流水线级，很少的数据和/或地址总线），泄漏的性质可以使用统计工具（如回归分析）或通过估计（多变量）正态分布来适当地建模。我们的研究假设是，人们可以通过利用先验推导（指令级）泄漏模型对这些设备上的新实现的泄漏行为做出有意义的陈述。为了让有限的特定领域知识的工程师能够做到这一点，从而提高他们开发的软件质量，我们的首要目标是：根据适当的预防一级渗漏模型的发展，（对于设备）加上密码原语的规范，我们会研究各种技术，以便对渗漏情况作出可靠的评估，相关的攻击，而不需要一个设备齐全的侧信道实验室。