Stochastic methods defeat regular RSA exponentiation algorithms with combined blinding methods

DOI10.1515/JMC-2020-0010MaRDI QIDQ2048183zbMATH OpenOpenAlexFDO

Authors Margaux Dugardin, Sylvain Guilley, Werner Schindler

Publication date 5 August 2021

Published in Journal of Mathematical Cryptology (Search for Journal in Brave)

Copyright license Creative Commons Attribution 4.0 International

Full work available at URL https://doi.org/10.1515/jmc-2020-0010

zbMATH Keywords

base blindingextra-reductionmaximum likelihoodmodulus blindingMontgomery multiplicationoptimizationregular exponentiationRSAside-channel analysis

Mathematics Subject Classification ID

Stochastic processes (60G99) Point estimation (62F10) Cryptography (94A60)

Recommendations

• Attacking Exponent Blinding in RSA without CRT
• Correlated extra-reductions defeat blinded regular exponentiation
• Exclusive exponent blinding may not suffice to prevent timing attacks on RSA
• Defeating RSA multiply-always and message blinding countermeasures
• ROSETTA for single trace analysis

Cites work

• A Refined Power-Analysis Attack on Elliptic Curve Cryptosystems
• A Vulnerability in RSA Implementations Due to Instruction Cache Analysis and Its Demonstration on OpenSSL
• Attacking randomized exponentiations using unsupervised learning
• Correlated extra-reductions defeat blinded regular exponentiation
• Cryptography and Coding
• Exclusive exponent blinding may not suffice to prevent timing attacks on RSA
• scientific article; zbMATH DE number 1617927 (Why is no real title available?)
• scientific article; zbMATH DE number 2085436 (Why is no real title available?)
• scientific article; zbMATH DE number 1804022 (Why is no real title available?)
• scientific article; zbMATH DE number 2079918 (Why is no real title available?)
• scientific article; zbMATH DE number 1759286 (Why is no real title available?)
• scientific article; zbMATH DE number 1418307 (Why is no real title available?)
• Improving Divide and Conquer Attacks against Cryptosystems by Better Error Detection / Correction Strategies
• Information security practice and experience. Third international conference, ISPEC 2007, Hong Kong, China, May 7--9, 2007. Proceedings
• Modular Multiplication Without Trial Division
• Timing attack against protected RSA-CRT implementation used in PolarSSL
• Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems
• Zero-Value Point Attacks on Elliptic Curve Cryptosystem

Cited in

(6)

• Exclusive exponent blinding may not suffice to prevent timing attacks on RSA
• Correlated extra-reductions defeat blinded regular exponentiation
• Attacking randomized exponentiations using unsupervised learning
• ROSETTA for single trace analysis
• Exponent blinding does not always lift (partial) spa resistance to higher-level security
• A third is all you need: extended partial key exposure attack on CRT-RSA with additive exponent blinding

Describes a project that uses

Uses Software

• PolarSSL

This page was built for publication: Stochastic methods defeat regular RSA exponentiation algorithms with combined blinding methods

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2048183)