Title
ECDSA Passive Attacks, Leakage Sources, and Common Design Mistakes.
Abstract
Elliptic Curves Cryptography (ECC) tends to replace RSA for public key cryptographic services. ECC is involved in many secure schemes such as Elliptic Curve Diffie-Hellman (ECDH) key agreement, Elliptic Curve Integrated Encryption Scheme (ECIES), and Elliptic Curve Digital Signature Algorithm (ECDSA). As for every cryptosystem, implementation of such schemes may jeopardize the inherent security provided by the mathematical properties of the ECC. Unfortunate implementation or algorithm choices may create serious vulnerabilities. The elliptic curve scalar operation is particularly sensitive among these schemes. This article surveys passive attacks against well-spread elliptic curve scalar multiplication algorithms highlighting leakage sources and common mistakes that can be used to attack the ECDSA scheme. Experimental results are provided to illustrate and demonstrate the effectiveness of each vulnerability. Finally, the article describes the link between partial leakage and lattice attack in order to understand and demonstrate the impact of small leakages on the security of ECDSA. An example of side channel and lattice attack combination on NIST P-256 is provided in the case where the elliptic curve scalar multiplication is not protected against DPA/CPA and a controllable device is not accessible.
Year
DOI
Venue
2016
10.1145/2820611
ACM Trans. Design Autom. Electr. Syst.
Keywords
Field
DocType
Elliptic Curve Cryptography (ECC),Elliptic Curve Digital Signature Algorithm (ECDSA),scalar multiplication algorithms,side-channel analysis,simple power analysis,timing attack,lattices
Elliptic Curve Digital Signature Algorithm,Elliptic curve Diffie–Hellman,Computer security,Computer science,Parallel computing,Integrated Encryption Scheme,Side channel attack,Elliptic curve cryptography,Computer engineering,Key size,Curve25519,Counting points on elliptic curves
Journal
Volume
Issue
ISSN
21
2
1084-4309
Citations 
PageRank 
References 
1
0.40
12
Authors
3
Name
Order
Citations
PageRank
Dubeuf, J.110.74
David Hély28921.91
Vincent Beroulle38621.86