SIKE에서의 최신 마스킹 대응기법에 대한 딥러닝 기반 부채널 전력 분석
Deep Learning Based Side-Channel Analysis for Recent Masking Countermeasure on SIKE
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 양자 컴퓨터의 개발은 현재 사용 중인 이산대수 문제나 인수분해 문제 기반의 공개키 암호에 큰 위협이 되므로, 이에 NIST(National Institute of Standards and Technology)에서는 현재 컴퓨팅 환경 및 도래하는 양자 컴퓨팅 환경에서 모두 구현이 가능한 양자내성암호를 위해 공모전을 진행하고 있다. 이 중 NIST 양자내성암호 공모전 4라운드에 진출한 SIKE(Supersingular Isogeny Key Encapsulation)는 유일한 Isogeny 기반의 암호로써, 동일한 안전성을 갖는 다른 양자내성암호에 비해 짧은 공개키를 갖는 장점이 있다. 그러나, 기존의 암호 알고리즘과 마찬가지로, SIKE를 포함한 모든 양자내성암호는 현존하는 암호분석에 반드시 안전해야만 한다. 이에 본 논문에서는 SIKE에 대한 전력 분석 기반 암호분석 기술을 연구하였으며, 특히 웨이블릿 변환 및 딥러닝 기반 클러스터링 전력 분석을 통해 SIKE를 분석하였다. 그 결과, 현존하는 클러스터링 전력 분석 기법의 정확도를 50% 내외로 방어하는 마스킹 대응기법이 적용된 SIKE에 대해 100%에 가까운 분석 성공률을 보였으며, 이는 현존하는 SIKE 기법에 대한 가장 강력한 공격임을 확인하였다.
Abstract
Recently, the development of quantum computers means a great threat to existing public key system based on discrete algebra problems or factorization problems. Accordingly, NIST is currently in the process of contesting and screening PQC(Post Quantum Cryptography) that can be implemented in both the computing environment and the upcoming quantum computing environment. Among them, SIKE is the only Isogeny-based cipher and has the advantage of a shorter public key compared to other PQC with the same safety. However, like conventional cryptographic algorithms, all quantum-resistant ciphers must be safe for existing cryptanlysis. In this paper, we studied power analysis-based cryptographic analysis techniques for SIKE, and notably we analyzed SIKE through wavelet transformation and deep learning-based clustering power analysis. As a result, the analysis success rate was close to 100% even in SIKE with applied masking response techniques that defend the accuracy of existing clustering power analysis techniques to around 50%, and it was confirmed that was the strongest attack on SIKE.
참고문헌 (32)
- W. Shor, Peter, "Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer", SIAM review, pp.303~332 (1999)
- R. Elkhatib, "Faster Isogenies for Quantum-Safe SIKE", Cryptology ePrint Archive, ~ (2021)
- R. Elkhatib, "Faster Isogenies for Post-quantum Cryptography : SIKE", Cryptographers’ Track at the RSA Conference, pp.49~72 (2022)
- B. Koziel, "SIKE’d up : Fast hardware architectures for supersingular Isogeny key encapsulation", IEEE Transactions on Circuits and System I: Regular Papers, 67(12), pp.4842~4854 (2020)
- M Anastasova, "Compressed SIKE Round 3 on ARM Cortex-M4", International Conference on Security and Privacy in Communication Systems, pp.441~457 (2021)
- A. Genêt, "Single-trace clustering power analysis of the point-swapping procedure in the three point ladder of Cortex-M4 SIKE", International Workshop on Constructive Side-Channel Analysis and Secure Design, pp.164~192 (2022)
- D. Zhang, "Fundamentals of image data mining: Analysis, Features, Classification and Retrieval", pp.35~44 (2019), In Fundamentals of image data mining : Analysis, Features, Classification and Retrieval
- G. Perin, "Keep it unsupervised : Horizontal attacks meet deep learning", IACR Transactions on Cryptographic Hardware and Embeded Systems (2021)
- L. De Feo, "Towards quantum-resistant cryptosystems from supersingular elliptic curve isogenies", Journal of Mathematical Cryptology, 8(3), pp.209~247 (2014)
- M. Campagna, "Supersingular isogeny key encapsulation", ~ (2019)
- D. J. Bernstein, "Montgomery curves and the montgomery ladder", Cryptology ePrint Archive (2017)
- K. Elsentrager, "An efficient Procedure to double and add points on an elliptic cuve", Cryptology ePrint Archive (2002)
- P. Y. Liardet, "Preventing SPA", DPA in ECC Systems using the Jacobi form, 2001, 391~401
- P. Kocher, "Differential power analysis", Annual International cryptology conference (1999)
- E. Brier, "Correlation power analysis with a leakage model", International workshop on cryptographic hardware and embedded systems (2004)
- I. kabin, "Horizontal address-bit DPA against montgomery kP implementation", 2017 International Conference on ReConFigurable Compution and FPGAs, pp.1~8 (2017)
- F. Shi, "A systematic approach to horizontal clustering analysis on embeded RSA implementation", 2019 IEEE 25th International Conference on Parallel and Distributed Systems, pp.901~906 (2019)
- C. Clavier, "Horizontal correlation analysis on exponentiation", International Conference on Information and Communications Security (2010)
- H. Machrebi, "Deep learning based side channel attacks in pratice", Cryptology ePrint Archive (2019)
- K. Ngo, "A side-channel attack on a masked IND-CCA secure saber KEM implementation", IACR Transactions on Cryptographic Hardware and Embedded Systems, pp.676~707 (2021)
- F. Zhang, "Side-channel analysis and countermeasure design on ARM-based quantum-restitant SIKE", IEEE Transactions on Computers, 69(11), pp.1681~1693 (2020)
- A. Genet, "Full key recovery side-channel attack against ephemeral SIKE on the Cortex-M4", International Workshop on Constructive Side-Channel Analysis and Secure Design, pp.228~254 (2021)
- G. Hinterwalder, "Full-size high-security ECC implementation on MSP430 microcontrollers", International conference on cryptology and information security in Latin America, pp.31~47 (2014)
- A. F. Agarap, "Deep learning using rectified linear units(relu)" (2018)
- B. Xu, "Empirical evaluation of rectified activation in convolution network" (2015)
- X. Clorot, "Understading the difficulty of training deep feedforward neural networks", Proceeding of the thirteenth international conference on artificial intelligence and statistics, pp.249~256 (2010)
- K. He, "Delving deep into rectifiers : Surpassing human-level performance on Imagenet classification", Proceedings of the IEEE international conference on computer vision, pp.1026~1034 (2015)
- W. Castryck., "An efficient key recovery attack on SIDH(preliminary version)", Cryptology ePrint Archive (2022)
- W. Castryck, "CSIDH : an efficient post-quantum commutative group action", International Conference on the Theory and Application of Cryptology and Information Security, pp.395~427 (2018)
- D. Moody, "The Future of PQC", Inside Quantum Technology, ~ (2022)
- D. Jao, "SIKE Update", Forth PQC Standardization Conference (2022)
- L. De Feo, "SeaSign : compact isogeny signatures from class group actions", Annual International Conference on the Theory and Applications of Cryptographic Techniques, pp.759~789 (2019), Springer