NDLI: New single-trace side-channel attacks on a specific class of Elgamal cryptosystem

Content Provider	IET Digital Library
Author	Mahdion, Parinaz Soleimany, Hadi Habibi, Pouya Moazami, Farokhlagha
Abstract	The so-called N − 1 attack is one of the most important order-2 element attacks, as it requires a non-adaptive chosen ciphertext which is considered as a more realistic attack model compared to adaptive chosen ciphertext scenario. To protect the implementation against N − 1 attack, several literatures propose the simplest solution, i.e. ‘block the special message N − 1 ’. In this study, the authors conduct an in-depth research on the N − 1 attack based on the SMA and Montgomery ladder (ML) algorithms. They show that despite the unaccepted ciphertext N − 1 countermeasure, other types of N − 1 attacks are applicable to specific classes of Elgamal cryptosystems. They propose new chosen-message power-analysis attacks with order-4 elements which utilise a chosen ciphertext c such that c 2 = − 1 mod p where p is the prime number used as a modulus in Elgamal. Such a ciphertext can be found simply when p ≡ 1 mod 4 . They demonstrate that ML and SMA algorithms are subjected to the new N − 1 -type attack by utilising a different ciphertext. They implement the proposed attacks on the TARGET Board of the ChipWhisperer CW1173 and the proposed experiments validate the feasibility and effectiveness of the attacks by using only a single power trace.
Starting Page	151
Ending Page	156
Page Count	6
ISSN	17518709
Volume Number	14
e-ISSN	17518717
Issue Number	Issue 2, Mar (2020)
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/iet-ifs/14/2
Alternate Webpage(s)	https://digital-library.theiet.org/content/journals/10.1049/iet-ifs.2019.0044
Journal	IET Information Security
Publisher Date	2019-10-23
Access Restriction	Open
Rights Holder	© The Institution of Engineering and Technology
Subject Keyword	BRIP Method Chosen Ciphertext Scenario Chosen-message Power-analysis Attack Computational Complexity Cryptography Data Security Megamall Cryptosystem ML Algorithm Modular Exponentiation Algorithm Montgomery Ladder Algorithm N-1 Attack New Single-trace Side-channel Attack Nonadaptive Chosen Ciphertext Order-2 Element Attack Order-4 Element Realistic Attack Model Secret Exponent Side-channel Leakages SMA Method Square-and-multiply-always Method
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Chosen base-point side-channel attack on Montgomery ladder with x-only coordinate: with application to secp256k1

Side Channel Attacks

A New Key Recovery Side-Channel Attack on HQC with Chosen Ciphertext

Randomizing the Montgomery Powering Ladder

Analysis on the parameter selection method for FLUSH+RELOAD based cache timing attack on RSA

A CCA-PKE Secure-Cryptosystem Resilient to Randomness Reset and Secret-Key Leakage

Timing Attack Analysis on AAβ Cryptosystem

Differential power analysis resistant hardware implementation of the RSA cryptosystem

Collision-based chosen-message simple power clustering attack algorithm

New single-trace side-channel attacks on a specific class of Elgamal cryptosystem

Similar Documents

Chosen base-point side-channel attack on Montgomery ladder with x-only coordinate: with application to secp256k1

Side Channel Attacks

A New Key Recovery Side-Channel Attack on HQC with Chosen Ciphertext

Randomizing the Montgomery Powering Ladder

Analysis on the parameter selection method for FLUSH+RELOAD based cache timing attack on RSA

A CCA-PKE Secure-Cryptosystem Resilient to Randomness Reset and Secret-Key Leakage

Timing Attack Analysis on AAβ Cryptosystem

Differential power analysis resistant hardware implementation of the RSA cryptosystem

Collision-based chosen-message simple power clustering attack algorithm

New single-trace side-channel attacks on a specific class of Elgamal cryptosystem