Description
Cryptographic applications require random, unique and unpredictable keys. Since most cryptosystems need to access the key several times, it usually has to be stored permanently. This is a potential vulnerability regarding security, even if a protected memory is used as key storage. Implementing secure key generation and storage is therefore an important and challenging task which can be accomplished by Physical Unclonable Funtions (PUFs). PUFs are, typically digital, circuits that possess an intrinsic random- ness due to process variations which occur during manufacturing. They evaluate these variations and can therefore be used to generate secure cryptographic keys. It is not necessary to store these keys in a protected memory since they are implicitly stored in the PUF and can be repro- duced on demand. However, the results when reproducing a key vary, which can be interpreted as errors. Thus, error correction must be used in order to compensate this effect. We explain how methods from coding theory are applied in order to ensure reliable key reproduction. Previous work on this topic used stan- dard constructions, e.g. an ordinary concatenated scheme of a BCH and Repetition code. Based on this work we show how better results can be obtained using code classes and decoding principles not used for this sce- nario before. We exemplify these methods by specific code constructions which improve existing codes with respect to error probability, decoding complexity and codeword length. Examples based on Generalized Con- catenated, Reed-Muller and Reed-Solomon codes are given.
Next sessions
-
Verification of Rust Cryptographic Implementations with Aeneas
Speaker : Aymeric Fromherz - Inria
From secure communications to online banking, cryptography is the cornerstone of most modern secure applications. Unfortunately, cryptographic design and implementation is notoriously error-prone, with a long history of design flaws, implementation bugs, and high-profile attacks. To address this issue, several projects proposed the use of formal verification techniques to statically ensure the[…] -
On the average hardness of SIVP for module lattices of fixed rank
Speaker : Radu Toma - Sorbonne Université
In joint work with Koen de Boer, Aurel Page, and Benjamin Wesolowski, we study the hardness of the approximate Shortest Independent Vectors Problem (SIVP) for random module lattices. We use here a natural notion of randomness as defined originally by Siegel through Haar measures. By proving a reduction, we show it is essentially as hard as the problem for arbitrary instances. While this was[…] -
Endomorphisms via Splittings
Speaker : Min-Yi Shen - No Affiliation
One of the fundamental hardness assumptions underlying isogeny-based cryptography is the problem of finding a non-trivial endomorphism of a given supersingular elliptic curve. In this talk, we show that the problem is related to the problem of finding a splitting of a principally polarised superspecial abelian surface. In particular, we provide formal security reductions and a proof-of-concept[…]-
Cryptography
-