Toolchain for Timing Leakage Analysis of NIST Lightweight Crypto Candidates

Adam Blatchley Hansen; Morten Eskilden; Eske Hoy Nielsen

Abstract

With recent advances in IoT technology and lightweight devices, an ever increasing number of highly constrained systems now
communicate over networks. Modern cryptographic algorithms are often
poorly suited to the limitations of such devices, which has led to NIST
publishing a call for algorithms to be considered for new lightweight
standards.

As such devices are often deployed into adversarial environments, and
may not have the luxury of large caches, or hardware support for cryptographic primitives, proper side channel resistance is an important property for any new standard. We have collected a set of side channel analysis
tools, and used them to evaluate all 32 candidates in the second round
of the standardization process.

We provide the results of running our toolchain on all reference implementations, and show some of the timing leakages and design patterns
we discovered, and discuss the strengths and weaknesses of the various
tools.

We have compiled our toolchain into an easy to use Docker image targeting the competition API, which we have made available for candidates
to use for development purposes for the rest of the competition. Our
pipeline is available at GitHub

Original language	English
Publication date	Oct 2020
Publication status	Published - Oct 2020
Event	NIST Lightweight Cryptography Workshop 2020 - Virtual Duration: 19 Oct 2020 → 21 Oct 2020 https://csrc.nist.gov/Events/2020/lightweight-cryptography-workshop-2020

Workshop

Workshop	NIST Lightweight Cryptography Workshop 2020
Location	Virtual
Period	19/10/2020 → 21/10/2020
Internet address	https://csrc.nist.gov/Events/2020/lightweight-cryptography-workshop-2020

Access to Document

https://csrc.nist.gov/CSRC/media/Events/lightweight-cryptography-workshop-2020/documents/papers/toolchain-timing-leakage-lwc2020.pdf

Cite this

@conference{7baf11810a7f4db4aeb62f69958689b6,

title = "Toolchain for Timing Leakage Analysis of NIST Lightweight Crypto Candidates",

abstract = "With recent advances in IoT technology and lightweight devices, an ever increasing number of highly constrained systems nowcommunicate over networks. Modern cryptographic algorithms are oftenpoorly suited to the limitations of such devices, which has led to NISTpublishing a call for algorithms to be considered for new lightweightstandards.As such devices are often deployed into adversarial environments, andmay not have the luxury of large caches, or hardware support for cryptographic primitives, proper side channel resistance is an important property for any new standard. We have collected a set of side channel analysistools, and used them to evaluate all 32 candidates in the second roundof the standardization process.We provide the results of running our toolchain on all reference implementations, and show some of the timing leakages and design patternswe discovered, and discuss the strengths and weaknesses of the varioustools.We have compiled our toolchain into an easy to use Docker image targeting the competition API, which we have made available for candidatesto use for development purposes for the rest of the competition. Ourpipeline is available at GitHub",

author = "{Blatchley Hansen}, Adam and Morten Eskilden and Nielsen, {Eske Hoy}",

year = "2020",

month = oct,

language = "English",

note = "NIST Lightweight Cryptography Workshop 2020 ; Conference date: 19-10-2020 Through 21-10-2020",

url = "https://csrc.nist.gov/Events/2020/lightweight-cryptography-workshop-2020",

}

TY - ABST

T1 - Toolchain for Timing Leakage Analysis of NIST Lightweight Crypto Candidates

AU - Blatchley Hansen, Adam

AU - Eskilden, Morten

AU - Nielsen, Eske Hoy

PY - 2020/10

Y1 - 2020/10

N2 - With recent advances in IoT technology and lightweight devices, an ever increasing number of highly constrained systems nowcommunicate over networks. Modern cryptographic algorithms are oftenpoorly suited to the limitations of such devices, which has led to NISTpublishing a call for algorithms to be considered for new lightweightstandards.As such devices are often deployed into adversarial environments, andmay not have the luxury of large caches, or hardware support for cryptographic primitives, proper side channel resistance is an important property for any new standard. We have collected a set of side channel analysistools, and used them to evaluate all 32 candidates in the second roundof the standardization process.We provide the results of running our toolchain on all reference implementations, and show some of the timing leakages and design patternswe discovered, and discuss the strengths and weaknesses of the varioustools.We have compiled our toolchain into an easy to use Docker image targeting the competition API, which we have made available for candidatesto use for development purposes for the rest of the competition. Ourpipeline is available at GitHub

AB - With recent advances in IoT technology and lightweight devices, an ever increasing number of highly constrained systems nowcommunicate over networks. Modern cryptographic algorithms are oftenpoorly suited to the limitations of such devices, which has led to NISTpublishing a call for algorithms to be considered for new lightweightstandards.As such devices are often deployed into adversarial environments, andmay not have the luxury of large caches, or hardware support for cryptographic primitives, proper side channel resistance is an important property for any new standard. We have collected a set of side channel analysistools, and used them to evaluate all 32 candidates in the second roundof the standardization process.We provide the results of running our toolchain on all reference implementations, and show some of the timing leakages and design patternswe discovered, and discuss the strengths and weaknesses of the varioustools.We have compiled our toolchain into an easy to use Docker image targeting the competition API, which we have made available for candidatesto use for development purposes for the rest of the competition. Ourpipeline is available at GitHub

UR - https://csrc.nist.gov/Presentations/2020/toolchain-for-timing-leakage-analysis-of-lwc

M3 - Conference abstract for conference

T2 - NIST Lightweight Cryptography Workshop 2020

Y2 - 19 October 2020 through 21 October 2020

ER -

Toolchain for Timing Leakage Analysis of NIST Lightweight Crypto Candidates

Abstract

Workshop

Access to Document

Other files and links

Fingerprint