An Optimal Universal Construction for the Threshold Implementation of Bijective S-Boxes
dc.contributor.author | Piccione, Enrico | |
dc.contributor.author | Andreoli, Samuele | |
dc.contributor.author | Budaghyan, Lilya | |
dc.contributor.author | Carlet, Claude Michael | |
dc.contributor.author | Dhooghe, Siemen | |
dc.contributor.author | Nikova, Svetla | |
dc.contributor.author | Petrides, George | |
dc.contributor.author | Rijmen, Vincent Stefaan | |
dc.date.accessioned | 2024-08-14T08:49:47Z | |
dc.date.available | 2024-08-14T08:49:47Z | |
dc.date.created | 2023-10-11T13:54:08Z | |
dc.date.issued | 2023 | |
dc.identifier.issn | 0018-9448 | |
dc.identifier.uri | https://hdl.handle.net/11250/3146223 | |
dc.description.abstract | Threshold implementation is a method based on secret sharing to secure cryptographic ciphers (and in particular S-boxes) against differential power analysis side-channel attacks which was proposed by Nikova, Rechberger, and Rijmen in 2006. Until now, threshold implementations were only constructed for specific types of functions and some small S-boxes, but no generic construction was ever presented. In this paper, we present the first universal threshold implementation with t+2 shares that is applicable to any bijective S-box, where t is its algebraic degree (or is larger than the algebraic degree). While being universal, our construction is also optimal with respect to the number of shares, since the theoretically smallest possible number, t+1 , is not attainable for some bijective S-boxes. Our results enable low latency secure hardware implementations without the need for additional randomness. In particular, we apply this result to find two uniform sharings of the AES S-box. The first sharing is obtained by using the threshold implementation of the inversion in F28 and the second by using two threshold implementations of two cubic power permutations that decompose the inversion. Area and performance figures for hardware implementations are provided. | en_US |
dc.language.iso | eng | en_US |
dc.publisher | IEEE | en_US |
dc.title | An Optimal Universal Construction for the Threshold Implementation of Bijective S-Boxes | en_US |
dc.type | Journal article | en_US |
dc.type | Peer reviewed | en_US |
dc.description.version | acceptedVersion | en_US |
dc.rights.holder | Copyright 2023 IEEE | en_US |
cristin.ispublished | true | |
cristin.fulltext | original | |
cristin.qualitycode | 2 | |
dc.identifier.doi | 10.1109/TIT.2023.3287534 | |
dc.identifier.cristin | 2183773 | |
dc.source.journal | IEEE Transactions on Information Theory | en_US |
dc.source.pagenumber | 6700-6710 | en_US |
dc.identifier.citation | IEEE Transactions on Information Theory. 2023, 69 (10), 6700-6710. | en_US |
dc.source.volume | 69 | en_US |
dc.source.issue | 10 | en_US |
Files in this item
This item appears in the following Collection(s)
-
Department of Informatics [967]
-
Registrations from Cristin [10149]