PICARO: a block cipher allowing efficient higher-order side-channel resistance

  • Authors:
  • Gilles Piret;Thomas Roche;Claude Carlet

  • Affiliations:
  • Oberthur Technologies, Nanterre, France;ANSSI, Paris 07, SP, France;LAGA, Universities of Paris 8 and Paris 13, CNRS, Saint-Denis Cedex, France

  • Venue:
  • ACNS'12 Proceedings of the 10th international conference on Applied Cryptography and Network Security
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Many papers deal with the problem of constructing an efficient masking scheme for existing block ciphers. We take the reverse approach: that is, given a proven masking scheme (Rivain and Prouff, CHES 2010) we design a block cipher that fits well the masking constraints. The difficulty of implementing efficient masking for a block cipher comes mainly from the S-boxes. Therefore the choice of an adequate S-box is the first and most critical step of our work. The S-box we selected is non-bijective; we discuss the resulting design and security problems. A complete design of the cipher is given, as well as some implementation results.