Recently,several PC oracle based side-channel attacks have been proposed against Kyber.However,most of them focus on unprotected implementations and masking is considered as a counter-measure.In this study,we extend P...Recently,several PC oracle based side-channel attacks have been proposed against Kyber.However,most of them focus on unprotected implementations and masking is considered as a counter-measure.In this study,we extend PC oracle based side-channel attacks to the second-order scenario and successfully conduct key-recovery attacks on the first-order masked Kyber.Firstly,we analyze the potential joint information leakage.Inspired by the binary PC oracle based attack proposed by Qin et al.at Asiacrypt 2021,we identify the 1-bit leakage scenario in the masked Keccak implementation.Moreover,we modify the ciphertexts construction described by Tanaka et al.at CHES 2023,extending the leakage scenario from 1-bit to 32-bit.With the assistance of TVLA,we validate these leakages through experiments.Secondly,for these two scenarios,we construct a binary PC oracle based on t-test and a multiple-valued PC oracle based on neural networks.Furthermore,we conduct practical side-channel attacks on masked Kyber by utilizing our oracles,with the implementation running on an ARM Cortex-M4 microcontroller.The demonstrated attacks require a minimum of 15788 and 648 traces to fully recover the key of Kyber768 in the 1-bit leakage scenario and the 32-bit leakage scenario,respectively.Our analysis may also be extended to attack other post-quantum schemes that use the same masked hash function.Finally,we apply the shuffling strategy to the first-order masked imple-mentation of the Kyber and perform leakage tests.Experimental results show that the combination strategy of shuffling and masking can effectively resist our proposed attacks.展开更多
传统压缩感知(CS,Compressive Sensing)成像方法一般假定目标精确位于事先划定的成像网格上,实际中由于散射点空间位置是连续分布的,因此偏离网格(Off-grid)问题必然存在.这会引起真实回波测量值与默认系统观测矩阵之间失配,导致传统CS...传统压缩感知(CS,Compressive Sensing)成像方法一般假定目标精确位于事先划定的成像网格上,实际中由于散射点空间位置是连续分布的,因此偏离网格(Off-grid)问题必然存在.这会引起真实回波测量值与默认系统观测矩阵之间失配,导致传统CS成像方法性能恶化.本文基于频率分集多输入多输出(FD-MIMO,Frequency Diverse Multiple-Input Multiple-Output)雷达,针对Off-grid目标提出了一种基于贝叶斯压缩感知的稀疏自聚焦(SAF-BCS,Sparse Autofocus Imaging Method Based on Bayesian Compressive Sensing)成像算法.该算法依据最大后验(MAP,Maximum A Posteriori)准则,利用变分贝叶斯学习技术求解含有Off-grid目标的稀疏像.与传统稀疏重构方法相比,所提方法充分利用了目标先验信息,可自适应调整参数,能够更好地反演稀疏目标,同时具有校正Off-grid目标的网格位置偏差以及估计噪声功率等优势.仿真结果表明SAF-BCS算法对网格划分不敏感,具有稳健的成像性能.展开更多
基金supported by the Natural Science Foundation of China (62072421, U2336206, 62102386, 62372423, and U20B2047)Fundamental Research Funds for the Central Universities (WK2100000041)。
基金National Natural Science Foundation of China(62472397)Innovation Program for Quantum Science and Technology(2021ZD0302902)。
文摘Recently,several PC oracle based side-channel attacks have been proposed against Kyber.However,most of them focus on unprotected implementations and masking is considered as a counter-measure.In this study,we extend PC oracle based side-channel attacks to the second-order scenario and successfully conduct key-recovery attacks on the first-order masked Kyber.Firstly,we analyze the potential joint information leakage.Inspired by the binary PC oracle based attack proposed by Qin et al.at Asiacrypt 2021,we identify the 1-bit leakage scenario in the masked Keccak implementation.Moreover,we modify the ciphertexts construction described by Tanaka et al.at CHES 2023,extending the leakage scenario from 1-bit to 32-bit.With the assistance of TVLA,we validate these leakages through experiments.Secondly,for these two scenarios,we construct a binary PC oracle based on t-test and a multiple-valued PC oracle based on neural networks.Furthermore,we conduct practical side-channel attacks on masked Kyber by utilizing our oracles,with the implementation running on an ARM Cortex-M4 microcontroller.The demonstrated attacks require a minimum of 15788 and 648 traces to fully recover the key of Kyber768 in the 1-bit leakage scenario and the 32-bit leakage scenario,respectively.Our analysis may also be extended to attack other post-quantum schemes that use the same masked hash function.Finally,we apply the shuffling strategy to the first-order masked imple-mentation of the Kyber and perform leakage tests.Experimental results show that the combination strategy of shuffling and masking can effectively resist our proposed attacks.
文摘传统压缩感知(CS,Compressive Sensing)成像方法一般假定目标精确位于事先划定的成像网格上,实际中由于散射点空间位置是连续分布的,因此偏离网格(Off-grid)问题必然存在.这会引起真实回波测量值与默认系统观测矩阵之间失配,导致传统CS成像方法性能恶化.本文基于频率分集多输入多输出(FD-MIMO,Frequency Diverse Multiple-Input Multiple-Output)雷达,针对Off-grid目标提出了一种基于贝叶斯压缩感知的稀疏自聚焦(SAF-BCS,Sparse Autofocus Imaging Method Based on Bayesian Compressive Sensing)成像算法.该算法依据最大后验(MAP,Maximum A Posteriori)准则,利用变分贝叶斯学习技术求解含有Off-grid目标的稀疏像.与传统稀疏重构方法相比,所提方法充分利用了目标先验信息,可自适应调整参数,能够更好地反演稀疏目标,同时具有校正Off-grid目标的网格位置偏差以及估计噪声功率等优势.仿真结果表明SAF-BCS算法对网格划分不敏感,具有稳健的成像性能.
