Ring-LWE 기반 공개키 암호시스템의 선택 암호문 단순전력분석 공격 대응법
Countermeasure against Chosen Ciphertext Spa Attack of the Public-Key Cryptosystem Based on Ring-Lwe Problem
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
격자 기반 암호는 양자 컴퓨터 공격에 대응 가능한 포스트 양자 암호 중 하나로 알려져 있다. 그 중 ring-LWE 문제는 LWE의 대수적 변종으로 벡터 대신 환(ring)의 원소를 이용한다. 포스트 양자 암호라 할지라도 실제 디바이스에 이를 적용 할 때 부채널 분석 취약점이 존재한다는 것은 이미 알려져 있다. 실제 2016년 Park 등은 Roy 등이 제안한 NTT를 이용한 ring-LWE 기반 공개키 암호시스템의 SPA 취약점을 보고했으며, Reparaz 등은Roy 암호에 대한 DPA 공격 및 대응법을 2015년과 2016년에 제안하였다. 본 논문에서는 Roy 암호에 대하여Park 등이 제안한 선택 암호문 SPA 공격이 NTT를 적용하지 않은 Lyubashevsky 암호의 경우에도 동일하게 적용 가능함을 보인다. 또한 선택 암호문 SPA 공격에 안전한 대응기법을 제안한고 실험적으로 안전성을 검증한다.
Abstract
A lattice-based cryptography is known as one of the post-quantum cryptographies. Ring-LWE problem is an algebraic variant of LWE, which operates over elements of polynomial rings instead of vectors. It is already known that post-quantum cryptography has side-channel analysis vulnerability. In 2016, Park et al. reported a SPA vulnerability of the public key cryptosystem, which is proposed by Roy et al., based on the ring-LWE problem. In 2015 and 2016, Reparaz et al. proposed DPA attack and countermeasures against Roy cryptosystem. In this paper, we show that the chosen ciphertext SPA attack is also possible for Lyubashevsky cryptosystem which does not use NTT. And then we propose a countermeasure against CCSPA(Chosen Ciphertext SPA) attack and we also show through experiment that our proposed countermeasure is secure.
참고문헌 (10)
- P. Shor, "Algorithms for quantum computation : Discrete logarithms and factoring", Proceedings of the 35th Annual Symposium on Foundations of Computer Science, pp.124~134 (1994)
- P. Kocher, "Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems", Proceedings of the 16th Annual International Cryptology Conference, pp.104~113 (1996)
- C. Chen, "Differential Power Analysis of a McEliece Cryptosystem", Proceedings of the 13th International Conference on Applied Cryptography and Network Security, pp.538~556 (2015)
- M. K. Lee, "Countermeasures against the power analysis attack for the NTRU public key cryptosystem", IEICE Transactions on Fundamentals of Electronics on Communications and Computer Sciences, E93-A(1), pp.153~163 (2010)
- O. Reparaz, "A masked ring-LWE implementation", Proceedings of the 17th Workshop on Cryptographic Hardware and Embedded Systems, pp.683~702 (2015)
- O. Reparaz, "Additively homomorphic ring-LWE masking", Proceedings of the 7th International Conference on Post-Quantum Cryptography, pp.233~244 (2016)
- A. Park, "Chosen ciphertext Simple Power Analysis on software 8-bit implementation of ring-LWE encryption", Proceedings of the Hardware-Oriented Security and Trust(AsianHOST), pp.1~6 (2016)
- V. Lyubashevsky, "On Ideal Lattices and Learning with Errors over Rings", Proceedings of the 29th Annual International Conference on the Theory and Applications of Cryptographic Techniques, pp.1~23 (2010)
- S. Roy, "Compact ring-LWE cryptoprocessor", Proceedings of the 16th Workshop on Cryptographic Hardware and Embedded Systems, pp.371~391 (2014)
- N. Göttert, "On the Design of Hardware Building Blocks for Modern Lattice-Based Encryption Schemes", Proceedings of the 14th Workshop on Cryptographic Hardware and Embedded Systems, pp.512~529 (2012)