Organization of countermeasures against attacks on cryptographic keys by analyzing the power-consumption dynamics of IoT terminal platforms
DOI:
https://doi.org/10.18372/2073-4751.86.21279Keywords:
modular exponentiation, public-key cryptography, power analysis, polymorphic computation, precomputation, IoTAbstract
The paper addresses the problem of improving the protection of modular exponentiation, which is the basic operation of public-key cryptography in IoT-based remote control systems, against attacks based on power-consumption analysis. It is shown that classical modular exponentiation algorithms are vulnerable to SPA, DPA and CPA because the sequence of executed operations depends on the bits of the secret exponent.
A method of polymorphic modular exponentiation is proposed, in which the exponent bits are processed in variable-length groups using precomputations. The use of different group sets for each computation eliminates the direct relationship between the exponent bits and modular multiplication operations, which complicates power-analysis attacks and prevents statistical reconstruction of the exponent code.
It has been proven that, in addition to improving the protection level, the proposed method provides a 7–15% acceleration of software modular exponentiation, which is important for low-power IoT terminal platforms.
References
Patel B.C. IoT an Overview: Advantage, Disadvantage and Applications / Bhagwari Charan Patel, Ram Dhankar Tripathi, Naveen Goel // International Journal of Computer Applications Technology and Research. Vol. 10.- № 5.- P.119-122.
Schneier B. Applied Cryptography. Protocols. Algorithms and Source codes in C. Ed.John Wiley, 1996 - 758 p.
Mangard S. Power Analysis Attacks: Revealing the Secrets of Smart Cards / Stefan Mangard, Elisabeth Oswald, Thomas Pop // Springer-Verlag.- 2007. – P. 338. DOI: 10.1007/978-0-387-38162-6.
Randolp M. Power Side-Channel Atttack Analysis: A Review of 20 Years of Study for the / Mark Randolph, William Diehl // Cryptography.- 2020.- Vol.4- № 4. - P.1-33. DOI: 10.3390/ cryptography4020015.
Марковський О.П.Метод прискорення модулярного піднесення до квадрату довгих чисел для криптографічних застосувань / О.П. Марковський , Аль-Мрaят Гассан Абдель Жаліль // Проблеми управління та інформатизації.- 2024.- № 1 (77).- С.68-79. DOI: 10.18372/2073-4751.77.18659
Messerges T.S. Examining smart-cart security under the threat of power analysis attacks / T.S. Messerges, E.A. Dabbish, R.H. Sloan // IEEE Transaction on Computers.- 2002.- Vol.51.- № 5. - P.541-552. DOI: 10.31109/TC.2002.1004593.
Марковський О.П. До проблеми захисту операндів модулярного експоненціювання від їх реконструкції аналізом споживання потужності // О.П. Марковський, А.А.Зюзя, Мухаммад Мефлех Алиса Абабне, В.М. Гаразд // Вісник НТУУ. Інформатика, управління та обчислювальна техніка 2007.- Вип.47.- С.22-32.
Clavier C. Universal exponentiation algorithm - A first step to toward provable SPA-resistance / С. Clavier, M. Joye // Proceeding of 3-th International Workshop “Cryptographic Hardware and Embedded Systems”(CHES-2001), - 2001. LNCS-2162,-P. 300-308.
Русанова О.В. Метод модулярного експоненціювання з захистом від атак аналізом динаміки споживання потужності / О.В. Русанова, О.П. Марковський, В.В. Вовк //. Проблеми управління та інформатизації.- 2024.- № 4 (80).- С.93-103. DOI: 10.18372/2073-4751.80.19774.
Markovskyi O. A Secure Cloud Computing Approach for Rapid Implementation of Public Key Cryptography on IoT Terminal Devices / O. Markovskyi, M. Haidukevych, J. Borges, N. Serhiichuk // 14th International Conference on Dependable Systems, Services and Technologies DESSERT-2024, Athens, Greece, -2024,- P. 55-59, DOI: 10.1109/DESSERT65323.2024.11122255.
Markovskyi O.P. Method for Power Analysis-Proof Implementation of Modular Exponentiation on IoT Terminal Microcontrollers / O.P. Markovskyi, Jose Borges, Nazar Serhiichuk, N.G. Bardis //14-th International Conference on Dependable system, Service and Technologies DESSERT-2024, Greece, Athens.-2024.-P.248-253. - DOI: 10.1109/DESSERT65323.2024.11122248.
Kocher P. Differential Power Analysis / Р. Kocher, J.Jaffe, B.Jun // Proceeding of CRYPTO’99.-Springer-Verlag.-1999.- P.388-404.
Bardis N.Organization of the polymorphic implementation of Rijndael on microcontrollers and smart cards / N/Bardis, N. Doukas, O.P. Markovskyi // Conference Military Communication – Milcom-2010. USA-2010.- P.43-51. DOI: 10.1109/ MILCOM.2010.5680249.
Wells J.B. A calculus with polymorphic and polyvariant flow types / J.B. Wells, A. Dimock, R. Muller, F.Turback // Journal of Functional Programming.- 2002.- Vol.12.- 3.- P.183-227. DOI: 10.1017/ S095679680 1004245.
Markovskyi O. An Accelerate Approach for Public Key Cryptography Implementation on IoT Terminal Platforms / O. Markovskyi, Al-Vrayat Ghassan Abdel Jalil Halil, Nikolaos Doukas, Nikos Bardis // 13-th International Conference on Dependable system, Service and Technologies DESSERT-2023, 13-15 October, Greece, Athens. DOI: 10.1109/DESSERT61349.2023.1041651
Downloads
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution 4.0 International License.
The scientific journal adheres to the principles of Open Access and provides free, immediate, and permanent access to all published materials without financial, technical, or legal barriers for readers.
All articles are published in Open Access under the Creative Commons Attribution 4.0 International (CC BY 4.0) license.
Copyright
Authors who publish their works in the journal:
-
retain the copyright to their publications;
-
grant the journal the right of first publication of the article;
-
agree to the distribution of their materials under the CC BY 4.0 license;
-
have the right to reuse, archive, and distribute their works (including in institutional and subject repositories), provided that proper reference is made to the original publication in the journal.
