Skip to main content

and
  1. No Access

    Chapter and Conference Paper

    Side-Channeling the Kalyna Key Expansion

    In 2015, the block cipher Kalyna has been approved as the new encryption standard of Ukraine. The cipher is a substitution-permutation network, whose design is based on AES, but includes several different feat...

    Chitchanok Chuengsatiansup, Daniel Genkin in Topics in Cryptology – CT-RSA 2022 (2022)

  2. Chapter and Conference Paper

    Sliding Right into Disaster: Left-to-Right Sliding Windows Leak

    It is well known that constant-time implementations of modular exponentiation cannot use sliding windows. However, software libraries such as Libgcrypt, used by GnuPG, continue to use sliding windows. It is wi...

    Daniel J. Bernstein, Joachim Breitner in Cryptographic Hardware and Embedded System… (2017)

  3. Chapter and Conference Paper

    Flush, Gauss, and Reload – A Cache Attack on the BLISS Lattice-Based Signature Scheme

    We present the first side-channel attack on a lattice-based signature scheme, using the Flush+Reload cache-attack. The attack is targeted at the discrete Gaussian sampler, an important step in the Bimodal Lattice...

    Leon Groot Bruinderink, Andreas Hülsing in Cryptographic Hardware and Embedded System… (2016)

  4. Chapter and Conference Paper

    CacheBleed: A Timing Attack on OpenSSL Constant Time RSA

    The scatter-gather technique is a commonly implemented approach to prevent cache-based timing attacks. In this paper we show that scatter-gather is not constant time. We implement a cache timing attack against...

    Yuval Yarom, Daniel Genkin, Nadia Heninger in Cryptographic Hardware and Embedded System… (2016)

  5. No Access

    Chapter and Conference Paper

    Just a Little Bit More

    We extend the Flush+Reload side-channel attack of Benger et al. to extract a significantly larger number of bits of information per observed signature when using OpenSSL. This means that by observing only 25 sign...

    Joop van de Pol, Nigel P. Smart, Yuval Yarom in Topics in Cryptology –- CT-RSA 2015 (2015)

  6. Chapter and Conference Paper

    Evaluation and Cryptanalysis of the Pandaka Lightweight Cipher

    There is a growing need to develop lightweight cryptographic primitives suitable for resource-constrained devices permeating in increasing numbers into the fabric of life. Such devices are exemplified none mor...

    Yuval Yarom, Gefei Li, Damith C. Ranasinghe in Applied Cryptography and Network Security (2015)