Table of contents

  • This session has been presented September 19, 2003.

Description

  • Speaker

    Marc Joye - Gem+

Provable security becomes more and more popular in the cryptographic community. As exemplified by the NESSIE project, it is now common to see it as an attribute of a cryptosystem. Provable security is at the protocol level; a harder task may be to evaluate the security of a cryptosystem at the implementation level. Rather than considering a cryptosystem as a black-box, we may assume that some sensitive data can leak during the course of the execution of a (naively implemented) crypto-algorithm. A concrete example is given by the so-called side-channel analysis.<br/> Side-channel analysis is a powerful technique re-discovered by P. Kocher in 1996. The principle consists in monitoring some side-channel information like the running time, the power consumption, or the electromagnetic radiation. Next, from the monitored data, the attacker tries to deduce the inner-workings of the algorithm and thereby to retrieve some secret information. When there is a single measurement, the process is referred to as a simple side-channel analysis; and when there are several measurements handled together with statistical tools, the process is referred to as differential side-channel analysis.<br/> This talk is aimed at studying the resistance of elliptic curve cryptosystems against those two classes of attacks. In particular, we survey the various strategies proposed so far to prevent side-channel attacks.

Next sessions

  • Polytopes in the Fiat-Shamir with Aborts Paradigm

    • November 29, 2024 (13:45 - 14:45)

    • IRMAR - Université de Rennes - Campus Beaulieu Bat. 22, RDC, Rennes - Amphi Lebesgue

    Speaker : Hugo Beguinet - ENS Paris / Thales

    The Fiat-Shamir with Aborts paradigm (FSwA) uses rejection sampling to remove a secret’s dependency on a given source distribution.&nbsp; Recent results revealed that unlike the uniform distribution in the hypercube, both the continuous Gaussian and the uniform distribution within the hypersphere minimise the rejection rate and the size of the proof of knowledge. However, in practice both these[…]
    • Cryptography

    • Asymmetric primitive

    • Mode and protocol

  • Post-quantum Group-based Cryptography

    • December 20, 2024 (13:45 - 14:45)

    • IRMAR - Université de Rennes - Campus Beaulieu Bat. 22, RDC, Rennes - Amphi Lebesgue

    Speaker : Delaram Kahrobaei - The City University of New York

Show previous sessions