Results 1 to 10 of about 33,417 (152)
A Constant-time AVX2 Implementation of a Variant of ROLLO
Transactions on Cryptographic Hardware and Embedded Systems, 2021 This paper introduces a key encapsulation mechanism ROLLO+ and presents a constant-time AVX2 implementation of it. ROLLO+ is a variant of ROLLO-I targeting IND-CPA security. The main difference between ROLLO+ and ROLLO-I is that the decoding algorithm of
Tung Chou, Jin-Han Liou
doaj +3 more sources
Verifying Constant-Time Implementations by Abstract Interpretation [PDF]
Lecture Notes in Computer Science, 2017 Constant-time programming is an established discipline to secure programs against timing attackers. Several real-world secure C libraries such as NaCl, mbedTLS, or Open Quantum Safe, follow this discipline. We propose an advanced static analysis, based on state-of-the-art techniques from abstract interpretation, to report time leakage during ...
Sandrine Blazy +2 more
exaly +4 more sources
MemJam: A False Dependency Attack Against Constant-Time Crypto Implementations [PDF]
International Journal of Parallel Programming, 2018 Cache attacks exploit memory access patterns of cryptographic implementations. Constant-Time implementation techniques have become an indispensable tool in fighting cache timing attacks. These techniques engineer the memory accesses of cryptographic operations to follow a uniform key independent pattern. However, the constant-time behavior is dependent
Berk Sunar +2 more
exaly +3 more sources
Constant-time addition with hybrid-redundant numbers: Theory and implementations [PDF]
The Integration VLSI Journal, 2008 Hybrid-redundant number representation has provided a flexible framework for digit-parallel addition in a manner that facilitates area-time tradeoffs for VLSI implementations via arbitrary spacing of redundant digit positions within an otherwise nonredundant representation.
Ghassem Jaberipur, Behrooz Parhami
exaly +2 more sources
Verifiable Side-Channel Security of Cryptographic Implementations: Constant-Time MEE-CBC [PDF]
Lecture Notes in Computer Science, 2016 We provide further evidence that implementing software countermeasures against timing attacks is a non-trivial task and requires domain-specific software development processes: we report an implementation bug in the s2n library, recently released by AWS Labs.
Gilles Barthe +2 more
exaly +4 more sources
Towards Efficient Verification of Constant-Time Cryptographic Implementations
Proceedings of the ACM on Software EngineeringTiming side-channel attacks exploit secret-dependent execution time to fully or partially recover secrets of cryptographic implementations, posing a severe threat to software security. Constant-time programming discipline is an effective software-based countermeasure against timing side-channel attacks, but developing constant-time implementations ...
Fu Song, Taolue Chen, Luwei Cai
exaly +3 more sources
Comparing computational times for simulations when using PBPK model template and stand-alone implementations of PBPK models [PDF]
Frontiers in ToxicologyIntroductionWe previously developed a PBPK model template that consists of a single model “superstructure” with equations and logic found in many physiologically based pharmacokinetic (PBPK) models.
Amanda S. Bernstein +3 more
doaj +2 more sources
Breaking Bad: How Compilers Break Constant-Time Implementations
Proceedings of the 20th ACM Asia Conference on Computer and Communications SecurityThe implementations of most hardened cryptographic libraries use defensive programming techniques for side-channel resistance. These techniques are usually specified as guidelines to developers on specific code patterns to use or avoid. Examples include performing arithmetic operations to choose between two variables instead of executing a secret ...
Srdjan Capkun
exaly +4 more sources
IACR Transactions on Symmetric CryptologyHash functions are a crucial component in incrementally verifiable computation (IVC) protocols and applications. Among those, recursive SNARKs and folding schemes require hash functions to be both fast in native CPU computations and compact in algebraic
Lorenzo Grassi +5 more
doaj +2 more sources
On timing side channels in “constant-time implementations”
Journal of Cryptographic EngineeringAbstract Cryptographic software following sound, modern practices and adhering to recommendations for writing constant-time code (e.g., RFC 7748) may yet leak secret data via the most naïve kind of timing side channels when a “secure” implementation in a high-level language gets compiled down to assembly instructions. This paper shows
exaly +2 more sources