{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T18:23:30Z","timestamp":1740162210490,"version":"3.37.3"},"reference-count":18,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2020,6,12]],"date-time":"2020-06-12T00:00:00Z","timestamp":1591920000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2020,6,12]],"date-time":"2020-06-12T00:00:00Z","timestamp":1591920000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cryptogr Eng"],"published-print":{"date-parts":[[2021,6]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>This paper presents a method for constructing an operation sequence of sliding window exponentiation from the noisy cache information of RSA, which can be used for a cache attack using sliding windows leak (SWL). An SWL attack can retrieve the secret keys of RSA with non-negligible probability if the SWL is correctly captured. However, in practice, it is not always possible for an attacker to acquire a complete and correct operation sequence from cache information observation. In this paper, we first show that the capture errors in an operation sequence can be evaluated based on the Levenshtein distance between correct and estimated sequences. The dynamic time warping algorithm is employed for quantitative evaluation. Then, we present a method of accurately estimating a complete and correct operation sequence from noisy sequences obtained through multiple observations. Furthermore, we show the effectiveness of the proposed method through a set of experiments performed using RSA software in Libgcrypt. As a result, we can identify the correct operation sequence from approximately 100 observations of cache traces.<\/jats:p>","DOI":"10.1007\/s13389-020-00230-x","type":"journal-article","created":{"date-parts":[[2020,6,12]],"date-time":"2020-06-12T09:04:11Z","timestamp":1591952651000},"page":"161-170","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A method for constructing sliding windows leak from noisy cache timing information"],"prefix":"10.1007","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9754-6792","authenticated-orcid":false,"given":"Rei","family":"Ueno","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junko","family":"Takahashi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu-ichi","family":"Hayashi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Naofumi","family":"Homma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,6,12]]},"reference":[{"issue":"1","key":"230_CR1","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1007\/s00145-009-9049-y","volume":"23","author":"E Tromer","year":"2010","unstructured":"Tromer, E., Osvik, D.A., Shamir, A.: Efficient cache attacks on AES, and countermeasures. J. Cryptol. 23(1), 37\u201371 (2010)","journal-title":"J. Cryptol."},{"key":"230_CR2","unstructured":"Yarom, Y., Falkner, K.: Flush+Reload: a high resolution, low noise, L3 cache side-channel attack. In: 23rd USENIX Security Symposium (2014)"},{"key":"230_CR3","doi-asserted-by":"crossref","unstructured":"Inci, M.S., G\u00fclmezoglu, B., Irazoqui, G., Eisenbarth, T., Sunar, B.: Cache attacks enable bulk key recovery on the cloud. In: International Conference on Cryptographic Hardware and Embedded Systems. Volume 9813 of Lecture Notes in Computer Science, pp. 368\u2013388. Springer (2016)","DOI":"10.1007\/978-3-662-53140-2_18"},{"issue":"1","key":"230_CR4","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s13389-016-0141-6","volume":"8","author":"Y Yarom","year":"2018","unstructured":"Yarom, Y., Genkin, D., Heninger, N.: CacheBleed: a timing attack on OpenSSL constant-time RSA. J. Cryptogr. Eng. 8(1), 1\u201327 (2018)","journal-title":"J. Cryptogr. Eng."},{"issue":"1","key":"230_CR5","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s13389-016-0141-6","volume":"8","author":"Q Ge","year":"2018","unstructured":"Ge, Q., Yarom, Y., Cock, D., Heiser, G.: A survey of microarchitectural timing attacks and countermeasures on contemporary hardware. J. Cryptogr. Eng. 8(1), 1\u201327 (2018)","journal-title":"J. Cryptogr. Eng."},{"key":"230_CR6","doi-asserted-by":"crossref","unstructured":"Kocher, P., Horn, J., Fogh, A., , Genkin, D., Gruss, D., Haas, W., Hamgurg, M., Lipp, M., Mangard, S., Presher, T., Schwarz, M., Yarom, Y.: Spectre attacks: exploiting speculative execution. In: 40th IEEE Symposium on Security and Privacy (S&P\u201919) (2019)","DOI":"10.1109\/SP.2019.00002"},{"key":"230_CR7","unstructured":"Lipp, M., Schwarz, M., Gruss, D., Prescher, T., Haas, W., Fogh, A., Horn, J., Mangard, S., Kocher, P., Genkin, D., Yarom, Y., Hamburg, M.: Meltdown: reading kernel memory from user space. In: 27th USENIX Security Symposium (USENIX Security 18) (2018)"},{"key":"230_CR8","doi-asserted-by":"crossref","unstructured":"Bernstein, D.J., Breitner, J., Genkin, D., Bruinderink, L.G., Heninger, N., Lange, T., Vredendaal, C.v., Yarom, Y.: Sliding right into disaster: left-to-right sliding windows leak. In: International Conference on Cryptographic Hardware and Embedded Systems. Volume 10529 of Lecture Notes in Computer Science. Springer (2017)","DOI":"10.1007\/978-3-319-66787-4_27"},{"key":"230_CR9","volume-title":"Handbook of Applied Cryptography","author":"AJ Menezes","year":"1996","unstructured":"Menezes, A.J., van Oorschot, P.C., Vanstone, S.A.: Handbook of Applied Cryptography. CRC Press, Boca Raton (1996)"},{"key":"230_CR10","doi-asserted-by":"crossref","unstructured":"Kocher, C.P.: Timing attacks on implementations of Diffie\u2013Hellman, RSA, DSS, and other systems. In: Advances in Cryptology\u2014CRYPTO 1996. Volume 1109 of Lecture Notes in Computer Science, pp. 104\u2013113. Springer (1996)","DOI":"10.1007\/3-540-68697-5_9"},{"key":"230_CR11","unstructured":"GNU Privacy Guard. https:\/\/www.gnupg.org (2017). Accessed Oct 2017"},{"issue":"1","key":"230_CR12","doi-asserted-by":"publisher","first-page":"43","DOI":"10.1109\/TASSP.1978.1163055","volume":"26","author":"H Sakoe","year":"1978","unstructured":"Sakoe, H., Chiba, S.: Dynamic programming alogrithm optimization for spoken word recognition. IEEE Trans. Acoust., Speech Signal Process. 26(1), 43\u201349 (1978)","journal-title":"IEEE Trans. Acoust., Speech Signal Process."},{"key":"230_CR13","doi-asserted-by":"crossref","unstructured":"Heninger, N., Schacham, H.: Reconstructing RSA private keys from random key bits. In: Advances in Cryptology\u2014CRYPTO 2009. Volume 5677 of Lecture Notes in Computer Scienece, pp. 1\u201317. Springer (2009)","DOI":"10.1007\/978-3-642-03356-8_1"},{"key":"230_CR14","unstructured":"Ueno, R., Junko, T., Hayashi, Y.i., Homma, N.: Constructing sliding windows leak from noisy cache timing information of OSS-RSA. In: PROOFS Workshop, pp. 64\u201377 (2019)"},{"issue":"10","key":"230_CR15","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1016\/0898-1221(95)00153-P","volume":"30","author":"CK Ko\u00e7","year":"1995","unstructured":"Ko\u00e7, C.K.: Analysis of sliding window techniques for exponentiation. Comput. Math. Appl. 30(10), 17\u201324 (1995)","journal-title":"Comput. Math. Appl."},{"key":"230_CR16","unstructured":"Yarom, Y.: Mastik: a micro-architectural side-channel toolkit. https:\/\/cs.adelaide.edu.au\/~yval\/Mastik\/ (2018). Accessed Apr 2018"},{"key":"230_CR17","doi-asserted-by":"crossref","unstructured":"Allan, T., Brumley, B.B., Falkner, K., van\u00a0de Pol, J., Yarom, Y.: Amplifying side channels through performance degradation. In: ACM Annual Conference on Computer Security Applications (ACSAC), pp. 422\u2013435 (2016)","DOI":"10.1145\/2991079.2991084"},{"key":"230_CR18","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511574931","volume-title":"Algorithms on Strings, Trees, and Sequences: Computer Science and Computational Biology","author":"D Gusfield","year":"1997","unstructured":"Gusfield, D.: Algorithms on Strings, Trees, and Sequences: Computer Science and Computational Biology. Cambridge University Press, Cambridge (1997)"}],"container-title":["Journal of Cryptographic Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13389-020-00230-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s13389-020-00230-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13389-020-00230-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,6,11]],"date-time":"2021-06-11T23:06:49Z","timestamp":1623452809000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s13389-020-00230-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6,12]]},"references-count":18,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2021,6]]}},"alternative-id":["230"],"URL":"https:\/\/doi.org\/10.1007\/s13389-020-00230-x","relation":{},"ISSN":["2190-8508","2190-8516"],"issn-type":[{"type":"print","value":"2190-8508"},{"type":"electronic","value":"2190-8516"}],"subject":[],"published":{"date-parts":[[2020,6,12]]},"assertion":[{"value":"14 November 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 May 2020","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 June 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}