Smart card research and advanced applications : 20th international conference, CARDIS 2021, Lübeck, Germany, November 11-12, 2021 : revised selected papers

This book constitutes the proceedings of the 20th International Conference on Smart Card Research and Advanced Applications, CARDIS 2021, which took place in November 2021. The conference took place in Lübeck, Germany, and changed to a hybrid format due to the COVID-19 pandemic. The 16 full papers presented in this volume were carefully reviewed and selected from 32 submissions. They were organized in topical sections named Side-Channel Attacks, Fault Attacks, Public Key and Secure Implementations. Preface Organization Contents Side-Channel Attacks Single-Trace Fragment Template Attack on a 32-Bit Implementation of Keccak 1 Introduction 1.1 Motivation and Background 1.2 Contributions and Paper Structure 2 Preliminaries and Notation 2.1 LDA-based Templates on Keccak 2.2 Soft Analytical Side-Channel Analysis on Keccak 3 Our Attack Strategy 3.1 Template Attack on Word Fragments 3.2 Bitwise Loopy Belief Propagation on Factor Graphs 3.3 Dealing with Multiple Invocations 4 Experiments 4.1 Keccak Implementation and the Target Board 4.2 Trace Recording 4.3 SASCA Model Building and Evaluation 4.4 Loopy Belief-Propagation Results 5 Conclusion and Outlook References Trace-to-Trace Translation for SCA 1 Introduction 2 Preliminaries 2.1 Side-Channel Analysis 2.2 Datasets 2.3 Evaluation Metrics and Targeted Value 2.4 GAN 3 Trace-to-Trace Translation 3.1 Approach 3.2 Experimental Methodology 3.3 Used GAN Architecture 4 Translation from EM to Power 5 Cross-Device Translation 6 Conclusion and Future Work References Profiled Side-Channel Analysis in the Efficient Attacker Framework 1 Introduction 2 Existing Frameworks for Side-Channel Evaluation 2.1 Scientific Metrics 2.2 Practical Evaluation Testing 2.3 Practical Observations and Effects of Aging 3 The Efficient Attacker Framework 3.1 Threat Model 3.2 Components of a Successful Attack 3.3 Framework Description 4 Experimental Evaluation 4.1 Datasets 4.2 Efficient Attacker Framework Evaluation 4.3 Strong Adversary in the Efficient Attacker Framework 4.4 General Observations 4.5 Advantages of the Efficient Attacker Framework 5 Conclusions References Towards a Better Understanding of Side-Channel Analysis Measurements Setups 1 Introduction 2 Background 2.1 Mangard's SNR 2.2 Subspace Based Gaussian Templates 2.3 Information Theoretic Metrics and Bounds 3 Setup Model and Design Space 3.1 Setup Model 3.2 Platforms 3.3 Design Space 4 Experimental Results and Discussion 5 Conclusions References A Tale of Two Boards: On the Influence of Microarchitecture on Side-Channel Leakage 1 Introduction 2 Related Works 3 Background 4 Experimental Setup 5 A Closer Look at the Implementation 6 The Influence of Manufacturing Variability 7 The Influence of Microarchitectural Implementation 7.1 Power Profiles 7.2 Data Leakage 8 Conclusions and Future Work References Complete Practical Side-Channel-Assisted Reverse Engineering of AES-Like Ciphers 1 Introduction 2 Preliminaries 2.1 Setup 2.2 Power Leakage Model 2.3 Key Recovery 3 Reverse-Engineering AES-Like Ciphers 3.1 Partial Recovery 3.2 Finding 255 Candidates for M 3.3 Substitution Layer Recovery 4 Future Work and Conclusion References Fault Attacks Fast Calibration of Fault Injection Equipment with Hyperparameter Optimization Techniques 1 Introduction 2 Related Work 3 Fault Injection Optimization Approach 3.1 Common Approach 3.2 Our Approach 4 Hyperparameter Optimization Techniques 4.1 Parameter Space and Equipment Configuration 4.2 Successive Halving Algorithm 4.3 Sequential Model-Based Algorithm Configuration 5 Equipment Calibration with Different Microcontrollers 5.1 Target Microcontrollers 5.2 Setup 5.3 Experimental Protocol 5.4 Results 6 SMAC to Bypass a Code Protection Mechanism 6.1 STM32F103RB 7 Conclusion References Laboratory X-rays Operando Single Bit Attacks on Flash Memory Cells 1 Introduction 2 Materials and Methods 2.1 Preparation of Integrated Circuit ATmega128P for X-rays Attack 2.2 X-rays Source Laboratory 2.3 Operando Analysis of ATmega128P Device During X-rays Exposure 3 Results and Discussion 4 Towards Simple Single Bit Attacks with Laboratory X-rays Source 5 Conclusion References Multi-Spot Laser Fault Injection Setup: New Possibilities for Fault Injection Attacks 1 Introduction 1.1 Contributions 1.2 Outline 2 Related Work 2.1 Fault Model Considered 3 Limitations of Single-Spot Laser Fault Injection Setups 3.1 Existing Fault Models for Data Corruption 3.2 Contiguity 3.3 Time Dimension 4 Four-spot Laser Fault Injection Setup 4.1 Setup Description 4.2 Capabilities 4.3 Limitations 5 Two Examples of New Possible Faults 5.1 Experimental Setup 5.2 First Characterisation Code 5.3 Second Characterisation Code 6 Conclusion References Public-Key Cryptography In-depth Analysis of Side-Channel Countermeasures for CRYSTALS-Kyber Message Encoding on ARM Cortex-M4 1 Introduction 2 Background on CRYSTALS-Kyber 3 Side-channel Attack Paths Against CRYSTALS-Kyber 4 Message Encoding With Countermeasures 4.1 Message Encoding According to Reference Implementation 4.2 Message Encoding With Multiplication 4.3 Message Encoding Using Data Independent Polynomial Generation 4.4 Message Encoding Using Data Independent Polynomial Generation With Balanced Byte Look-Up 4.5 Message Encoding Using Polynomial Randomization 4.6 Message Encoding Using Byte and Bit Level Random Ordering 5 Experimental Results 5.1 Measurement Setup 5.2 Message Encoding According to Reference Implementation 5.3 Message Encoding with Multiplication 5.4 Message Encoding Using Data Independent Polynomial Generation 5.5 Message Encoding Using Data Independent Polynomial Generation with Balanced Byte Look-Up 5.6 Message Encoding Using Polynomial Randomization 5.7 Shuffled Message Encoding Using Byte and Bit Level Random Ordering 5.8 Comparison of Countermeasures 6 Conclusion References Hardware Implementations of Pairings at Updated Security Levels 1 Introduction 2 Background on Pairings 2.1 Introduction and Definition 2.2 Pairing Optimizations 3 Selection of Pairing-Friendly Curves and Parameters 3.1 Summary of Estimated Pairings Complexity 3.2 Pairing Arithmetic and Implementation Aspects 3.3 Implementation of the Final Exponentiation 4 Hardware Implementation of Pairings 4.1 Base Field Unit 4.2 Implementation Results 5 Conclusion and Future Work References A Hard Crystal - Implementing Dilithium on Reconfigurable Hardware 1 Introduction 2 Preliminaries 2.1 Notation 2.2 Number-Theoretic Transform 2.3 CRYSTALS-Dilithium 3 Design Considerations 3.1 Arithmetic 3.2 Memory 3.3 Functionality 4 Implementation on Reconfigurable Hardware 4.1 Architectural Details 4.2 Utilization and Performance Results 4.3 Comparison to Existing Work 5 Conclusion References Secure Implementations Under the Dome: Preventing Hardware Timing Information Leakage 1 Introduction 2 The Need to Redefine the Microarchitecture for Security 2.1 Threats 2.2 Related Work 3 Design Guidelines 3.1 Definitions and Goals 3.2 Resource Availability: Lock 3.3 Temporal Resource Sharing: Flush 3.4 Spatial Resource Sharing: Split 3.5 Exclusive Allocation and Heterogeneity 4 Domes 4.1 Fine-Grained Security Domains 4.2 Fence or Context 4.3 ISA Changes for Dome Support 4.4 Software Implications 5 Implementation 5.1 Target Description 5.2 Aubrac Core 5.3 Salers Core 6 Evaluation 6.1 Security Evaluation 6.2 Performances/Cost Analysis 7 Discussion and Conclusion References Enhanced Encodings for White-Box Designs 1 Introduction 2 State-of-the-Art 2.1 White-Box Designs 2.2 White-Box Encoding 3 New Encoding Design for White-Box Constructions 3.1 Preliminaries 3.2 Original Description of Benaloh Cryptosystem 3.3 Modified Benaloh Cryptosystem 3.4 Modified Benaloh Cryptosystem as White-Box Encoding 3.5 Using the Modified-Benaloh Encoding in a White-Box Design 4 Security Considerations 4.1 About the Shift Tables 4.2 About the Key 4.3 Summary 5 Performances: Example with AES-128 Encryption 6 Further Work 6.1 Against Side-Channel Attacks 6.2 Against Fault Attacks 7 Conclusion References PhiAttack 1 Introduction 1.1 Java Card Security Model 1.2 State-of-the-Art Java Card Platform Security 1.3 Contribution 2 Java Card Import Mechanism 2.1 Import Mechanism from the CAP File Point of View 2.2 Import Mechanism from the export File Point of View 3 PhiAttack 3.1 Setting-up the Attack 3.2 Understanding PhiAttack 3.3 Variations and Exploitation of Such an Attack 4 Discussion on Countermeasures 5 Conclusion References FuzzyKey: Comparing Fuzzy Cryptographic Primitives on Resource-Constrained Devices 1 Introduction 1.1 Related Work 1.2 Contributions 2 Background 2.1 Fuzzy Cryptographic Primitives for PS-Based Key Exchange 3 Design Security and Parameter Selection 4 Implementation 5 Performance Evaluation 5.1 Hamming Metric Constructions 5.2 Set Metric Constructions 5.3 Common Observations and Comparison with Curve25519 6 Conclusion References Author Index This book constitutes the proceedings of the 20th International Conference on Smart Card Research and Advanced Applications, CARDIS 2021, which took place in November 2021. The conference took place in Lubeck, Germany, and changed to a hybrid format due to the COVID-19 pandemic. The 16 full papers presented in this volume were carefully reviewed and selected from 32 submissions. They were organized in topical sections named Side-Channel Attacks, Fault Attacks, Public Key and Secure Implementations.