A Hardware-Friendly Shuffling Countermeasure Against Side-Channel Attacks for Kyber

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Xu, Dejun, Wang, Kai, Tian, Jing
Natura: Preprint
Pubblicazione: 2024
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866916824653758464
author Xu, Dejun
Wang, Kai
Tian, Jing
author_facet Xu, Dejun
Wang, Kai
Tian, Jing
contents CRYSTALS-Kyber has been standardized as the only key-encapsulation mechanism (KEM) scheme by NIST to withstand attacks by large-scale quantum computers. However, the side-channel attacks (SCAs) on its implementation are still needed to be well considered for the upcoming migration. In this brief, we propose a secure and efficient hardware implementation for Kyber by incorporating a novel compact shuffling architecture. First of all, we modify the Fisher-Yates shuffle to make it more hardware-friendly. We then design an optimized shuffling architecture for the well-known open-source Kyber hardware implementation to enhance the security of all known and potential side-channel leakage points. Finally, we implement the modified Kyber design on FPGA and evaluate its security and performance. The security is verified by conducting correlation power analysis (CPA) and test vector leakage assessment (TVLA) on the hardware. Meanwhile, FPGA place-and-route results show that the proposed design reports only 8.7% degradation on the hardware efficiency compared with the original unprotected version, much better than existing hardware hiding schemes.
format Preprint
id arxiv_https___arxiv_org_abs_2407_02452
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle A Hardware-Friendly Shuffling Countermeasure Against Side-Channel Attacks for Kyber
Xu, Dejun
Wang, Kai
Tian, Jing
Cryptography and Security
CRYSTALS-Kyber has been standardized as the only key-encapsulation mechanism (KEM) scheme by NIST to withstand attacks by large-scale quantum computers. However, the side-channel attacks (SCAs) on its implementation are still needed to be well considered for the upcoming migration. In this brief, we propose a secure and efficient hardware implementation for Kyber by incorporating a novel compact shuffling architecture. First of all, we modify the Fisher-Yates shuffle to make it more hardware-friendly. We then design an optimized shuffling architecture for the well-known open-source Kyber hardware implementation to enhance the security of all known and potential side-channel leakage points. Finally, we implement the modified Kyber design on FPGA and evaluate its security and performance. The security is verified by conducting correlation power analysis (CPA) and test vector leakage assessment (TVLA) on the hardware. Meanwhile, FPGA place-and-route results show that the proposed design reports only 8.7% degradation on the hardware efficiency compared with the original unprotected version, much better than existing hardware hiding schemes.
title A Hardware-Friendly Shuffling Countermeasure Against Side-Channel Attacks for Kyber
topic Cryptography and Security
url https://arxiv.org/abs/2407.02452