2010 | OriginalPaper | Buchkapitel
Protecting Circuits from Leakage: the Computationally-Bounded and Noisy Cases
verfasst von : Sebastian Faust, Tal Rabin, Leonid Reyzin, Eran Tromer, Vinod Vaikuntanathan
Erschienen in: Advances in Cryptology – EUROCRYPT 2010
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Physical computational devices leak side-channel information that may, and often does, reveal secret internal states. We present a
general
transformation that compiles any circuit into a new, functionally equivalent circuit which is resilient against well-defined classes of leakage. Our construction requires a
small
,
stateless
and
computation-independent
leak-proof component that draws random elements from a fixed distribution. In essence, we reduce the problem of shielding arbitrarily complex circuits to the problem of shielding a single, simple component.
Our approach is based on modeling the adversary as a powerful observer that inspects the device via a limited measurement apparatus. We allow the apparatus to access all the bits of the computation (except those inside the leak-proof component) and the amount of leaked information to grow unbounded over time. However, we assume that the apparatus is limited either in its computational ability (namely, it lacks the ability to decode certain linear encodings and outputs a limited number of bits per iteration), or its precision (each observed bit is flipped with some probability). While our results apply in general to such leakage classes, in particular, we obtain security against:
Constant depth circuits leakage
, where the measurement apparatus can be implemented by an
AC
0
circuit (namely, a constant depth circuit composed of NOT gates and unbounded fan-in AND and OR gates), or an
ACC
0
[
p
] circuit (which is the same as
AC
0
, except that it also uses
MOD
p
gates) which outputs a limited number of bits.
Noisy leakage
, where the measurement apparatus reveals all the bits of the state of the circuit, perturbed by independent binomial noise. Namely, each bit of the computation is perturbed with probability
p
, and remains unchanged with probability 1 −
p
.