SaTC: CORE: Small: An Automated Framework for Mitigating Single-Trace Side-Channel Leakage

量子计算机可以打破现有的加密算法(例如，RSA-Rivest-Shamir-Adleman)，这些算法用于保护日常应用中的数据传输，如销售点购买和在线支付。后量子密码学为这样的应用寻找新的网络安全解决方案，这些应用对量子计算机攻击具有弹性。美国国家科学技术研究所(NIST)目前正在评估和标准化这种算法，以便大规模采用。虽然这些算法在理论上可以证明是安全的，但它们的实际实现可能容易受到攻击。具体地说，攻击者可以利用运行加密算法的设备的功耗或电磁辐射对计算进行反向工程，并窃取秘密密钥。因此，下一代网络安全标准的实际部署需要针对此类攻击实施受保护的软件。与此同时，此类防御的验证和应用需要自动化，以广泛解决各种计算设备中的这些漏洞。该项目的新颖性暴露了运行后量子密码学的软件的未知风险到反向工程攻击，并开发了一个新的框架来自动应对这些风险。该项目的更广泛的意义和重要性是改善国家安全和培训具有网络安全意识的科学、技术、工程和数学(STEM)劳动力。该项目分析了NIST选择用于后量子标准化的基于格的密码算法的软件实现中的侧通道安全漏洞。该项目的主要研究目标是开发一个框架，以自动暴露和缓解单踪迹侧通道漏洞。单次跟踪攻击的目的是从单次执行的泄漏中窃取信息，比需要重复测量的攻击更难缓解。该项目通过应用静态和动态程序分析来检测漏洞，并使用带有随机化技术的程序修复来解决漏洞，从而增强了低级别的虚拟机框架。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Quantum computers can break existing cryptography algorithms (e.g., RSA - Rivest–Shamir–Adleman) that are used to secure data transmission in everyday applications, such as point-of-sale purchases and online payments. Post-quantum cryptography seeks new cybersecurity solutions for such applications that are resilient to quantum computer attacks. The National Institute of Science and Technology (NIST) is currently evaluating and standardizing such algorithms for mass-scale adoption. Although these algorithms can be shown to be theoretically secure, their practical implementation can be vulnerable to attacks. Specifically, adversaries can use the power consumption or electromagnetic radiation of a device running the cryptography algorithm to reverse-engineer computations and steal secret cryptographic keys. Therefore, practical deployment of next-generation cybersecurity standards requires protected software implementations against such attacks. At the same time, the validation and application of such defenses need automation to broadly address these vulnerabilities in a variety of computing devices. The project’s novelties are exposing unknown risks of software running post-quantum cryptography to reverse-engineering attacks and developing a new framework to automatically address those risks. The project’s broader significance and importance are improving national security and training a cybersecurity-aware science, technology, engineering and mathematics (STEM) workforce. This project analyzes side-channel security vulnerabilities in the software implementations of lattice-based cryptography algorithms that were chosen by NIST for post-quantum standardization. The primary research objective of this project is to develop a framework to automatically expose and mitigate single-trace side-channel vulnerabilities. Single-trace attacks aim to steal information from a single execution's leakage and are harder to mitigate than those needing repeated measurements. The project augments low-level virtual machine frameworks by applying static and dynamic program analysis to detect vulnerabilities, and by using program repair with randomization techniques to address the leakage.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.