{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T12:59:23Z","timestamp":1740142763266,"version":"3.37.3"},"reference-count":59,"publisher":"Oxford University Press (OUP)","issue":"6","license":[{"start":{"date-parts":[[2022,3,14]],"date-time":"2022-03-14T00:00:00Z","timestamp":1647216000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"funder":[{"name":"Henan Key Laboratory of Network Cryptography Technology","award":["LNCT2019-A05"],"award-info":[{"award-number":["LNCT2019-A05"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872040","61802186"],"award-info":[{"award-number":["61872040","61802186"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,6,19]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>In practice, when the security of a block cipher implementation is considered, the leakages related to the outer rounds encryptions can be used by side channel attacks (SCA) to recover the secret key. Therefore, the outer rounds of block cipher implementations should be protected. However, in order to lower the implementation price, the inner rounds of block cipher implementations may be unprotected. In light of this, the security of an outer rounds protected DES implementation is considered. In detail, template attack (TA), which is information theoretically the strongest SCA style, can be used to obtain the inner round output. Then, linear cryptanalysis (LC) can be used to recover the secret key. Finally, the optimal key enumeration algorithm can be used to optimize the efficiency of TA assisted LC. We evaluate the efficiency of TA assisted LC in simulated scenarios where a three outer rounds protected DES implementation is targeted. The evaluation results show that when 800 correct samples are available and the number of key enumeration is $2^{10}$, the efficiency of TA assisted LC can reach 83% of success rate. Overall, an efficient combination attack style that can be used to accurately evaluate the security of an outer rounds protected DES implementation is proposed.<\/jats:p>","DOI":"10.1093\/comjnl\/bxac020","type":"journal-article","created":{"date-parts":[[2022,2,5]],"date-time":"2022-02-05T12:08:06Z","timestamp":1644062886000},"page":"1434-1451","source":"Crossref","is-referenced-by-count":2,"title":["Template Attack Assisted Linear Cryptanalysis on Outer Rounds Protected DES Implementations"],"prefix":"10.1093","volume":"66","author":[{"given":"Hailong","family":"Zhang","sequence":"first","affiliation":[{"name":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences , Beijing , China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Yang","sequence":"additional","affiliation":[{"name":"Nanjing University of Science and Technology , Nanjing , China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2022,3,14]]},"reference":[{"volume-title":"Power Analysis Attacks - Revealing the Secrets of Smart Cards","year":"2007","author":"Mangard","key":"2023062010045980700_ref1"},{"key":"2023062010045980700_ref2","first-page":"104","volume-title":"Proc. CRYPTO 1996, Santa Barbara, CA, USA, 18\u201322 August, LNCS 1109","author":"Kocher","year":"1996"},{"key":"2023062010045980700_ref3","first-page":"388","volume-title":"Proc. CRYPTO 1999, Santa Barbara, CA, USA, 15\u201319 August, LNCS 1666","author":"Kocher","year":"1999"},{"key":"2023062010045980700_ref4","first-page":"251","volume-title":"Proc. CHES 2001, Paris, France, 14\u201316 May, LNCS 2162","author":"Gandolfi","year":"2001"},{"key":"2023062010045980700_ref5","first-page":"29","volume-title":"Proc. CHES 2002, Redwood Shores, CA, USA, 13\u201315 August, LNCS 2523","author":"Agrawal","year":"2002"},{"key":"2023062010045980700_ref6","first-page":"157","volume-title":"Proc. FC 2000, Anguilla, British West Indies, 20\u201324 February, LNCS 1962","author":"Coron","year":"2000"},{"key":"2023062010045980700_ref7","first-page":"231","volume-title":"Proc. CT-RSA 2012, San Francisco, CA, USA, 27 February - 2 March, LNCS 7178","author":"Heyszl","year":"2012"},{"key":"2023062010045980700_ref8","first-page":"248","volume-title":"Proc. CARDIS 2012, Graz, Austria, 28\u201330 November, LNCS 7771","author":"Heyszl","year":"2012"},{"key":"2023062010045980700_ref9","first-page":"13","volume-title":"Proc. CHES 2002, Redwood Shores, CA, USA, 13\u201315 August, LNCS 2523","author":"Chari","year":"2002"},{"key":"2023062010045980700_ref10","first-page":"1","volume-title":"Template Attacks in Principal Subspaces","author":"Archambeau","year":"2006"},{"key":"2023062010045980700_ref11","first-page":"411","volume-title":"CHES 2008, Washington, D.C., USA, 10\u201313 August, LNCS 5154","author":"Standaert","year":"2008"},{"key":"2023062010045980700_ref12","first-page":"253","volume-title":"CARDIS 2013, Berlin, Germany, 27\u201329 November, LNCS 8419","author":"Choudary","year":"2013"},{"key":"2023062010045980700_ref13","first-page":"16","volume-title":"Proc. CHES 2004, Cambridge, MA, USA, 11\u201313 August, LNCS 3156","author":"Brier","year":"2004"},{"key":"2023062010045980700_ref14","first-page":"174","volume-title":"Proc. CHES 2006, Yokohama, Japan, 10\u201313 October, LNCS 4249","author":"Le","year":"2006"},{"key":"2023062010045980700_ref15","first-page":"30","volume-title":"Proc. CHES 2005, Edinburgh, UK, 29 August - 1 September, LNCS 3659","author":"Schindler","year":"2005"},{"key":"2023062010045980700_ref16","first-page":"365","volume-title":"Proc. CT-RSA 2012, San Francisco, CA, USA, 27 February - 2 March, LNCS 7178","author":"Heuser","year":"2012"},{"key":"2023062010045980700_ref17","first-page":"426","volume-title":"Proc. CHES 2008, Washington, D.C., USA, 10\u201313 August, LNCS 5154","author":"Girelichs","year":"2008"},{"key":"2023062010045980700_ref18","first-page":"429","volume-title":"Proc. CHES 2009, Lausanne, Switzerland, 6\u20139 September, LNCS 5747","author":"Veyrat-Charvillon","year":"2009"},{"issue":"2","key":"2023062010045980700_ref19","doi-asserted-by":"crossref","first-page":"269","DOI":"10.1007\/s00145-010-9084-8","article-title":"Mutual information analysis: a comprehensive study","volume":"24","author":"Batina","year":"2011","journal-title":"J. Cryptol."},{"key":"2023062010045980700_ref20","first-page":"15","volume-title":"Proc. CHES 2006, Yokohama, Japan, 10\u201313 October, LNCS 4249","author":"Gierlichs","year":"2006"},{"issue":"2","key":"2023062010045980700_ref21","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1007\/s13389-011-0010-2","article-title":"Univariate side channel attacks and leakage modeling","volume":"1","author":"Doget","year":"2011","journal-title":"J. Cryptogr. Eng."},{"key":"2023062010045980700_ref22","first-page":"158","volume-title":"Proc. CHES 1999, Worcester, MA, USA, 12\u201313 August, LNCS 1717","author":"Goubin","year":"1999"},{"key":"2023062010045980700_ref23","first-page":"69","volume-title":"Proc. SAC 2004, Waterloo, Canada, 9\u201310 August, LNCS 3357","author":"Bl\u00f6mer","year":"2004"},{"key":"2023062010045980700_ref24","first-page":"208","volume-title":"Proc. CT-RSA 2006, San Jose, CA, USA, 13\u201317 February, LNCS 3860","author":"Schramm","year":"2006"},{"key":"2023062010045980700_ref25","first-page":"127","volume-title":"Proc. FSE 2008, Lausanne, Switzerland, 10\u201313 February, LNCS 5086","author":"Rivain","year":"2008"},{"key":"2023062010045980700_ref26","first-page":"413","volume-title":"Proc. CHES 2010, Santa Barbara, CA, USA, 17\u201320 August, LNCS 6225","author":"Rivain","year":"2010"},{"key":"2023062010045980700_ref27","first-page":"252","volume-title":"Proc. CHES 2000, Worcester, MA, USA, 17\u201318 August, LNCS 1965","author":"Clavier","year":"2000"},{"key":"2023062010045980700_ref28","first-page":"156","volume-title":"Proc. CHES 2009, Lausanne, Switzerland, 6\u20139 September, LNCS 5747","author":"Coron","year":"2009"},{"key":"2023062010045980700_ref29","first-page":"95","volume-title":"Proc. CHES 2010, Santa Barbara, CA, USA, 17\u201320 August, LNCS 6225","author":"Coron","year":"2010"},{"key":"2023062010045980700_ref30","first-page":"740 C757","volume-title":"Proc. ASIACRYPT 2012, Beijing, China, 2\u20136 December, LNCS 7658","author":"Veyrat-Charvillon","year":"2012"},{"key":"2023062010045980700_ref31","first-page":"171","volume-title":"Proc. CHES 2009, Lausanne, Switzerland, 6\u20139 September, LNCS 5747","author":"Rivain","year":"2009"},{"key":"2023062010045980700_ref32","first-page":"206","volume-title":"Proc. FSE 2003, Lund, Sweden, 24\u201326 February, LNCS 2887","author":"Schramm","year":"2003"},{"key":"2023062010045980700_ref33","first-page":"163","volume-title":"Proc. CHES 2004, Cambridge, MA, USA, 11\u201313 August, LNCS 3156","author":"Schramm","year":"2004"},{"key":"2023062010045980700_ref34","first-page":"176","volume-title":"Proc. CHES 2004, Cambridge, MA, USA, 11\u201313 August, LNCS 3156","author":"Ledig","year":"2004"},{"key":"2023062010045980700_ref35","first-page":"30","volume-title":"Proc. CHES 2008, Washington, D.C., USA, 10\u201313 August, LNCS 5154","author":"Bogdanov","year":"2008"},{"key":"2023062010045980700_ref36","first-page":"125","volume-title":"Proc. CHES 2010, Santa Barbara, CA, USA, 17\u201320 August, LNCS 6225","author":"Moradi","year":"2010"},{"key":"2023062010045980700_ref37","first-page":"428","volume-title":"Proc. EUROCRYPT 2012, Cambridge, UK, 15\u201319 April, LNCS 7237","author":"Moradi","year":"2012"},{"key":"2023062010045980700_ref38","first-page":"175","volume-title":"Proc. CHES 2012, Leuven, Belgium, 9\u201312 September, LNCS 7428","author":"G\u00e9rard","year":"2012"},{"key":"2023062010045980700_ref39","first-page":"97","volume-title":"Proc. CHES 2009, Lausanne, Switzerland, 6\u20139 September, LNCS 5747","author":"Renauld","year":"2009"},{"key":"2023062010045980700_ref40","first-page":"393","volume-title":"Proc. Inscrypt 2009, Beijing, China, 12\u201315 December, LNCS 6151","author":"Renauld","year":"2009"},{"key":"2023062010045980700_ref41","first-page":"428","volume-title":"Proc. CHES 2010, Santa Barbara, CA, USA, 17\u201320 August, LNCS 6225","author":"Oren","year":"2010"},{"key":"2023062010045980700_ref42","first-page":"140","volume-title":"Proc. CHES 2012, Leuven, Belgium, 9\u201312 September, LNCS 7428","author":"Oren","year":"2012"},{"key":"2023062010045980700_ref43","first-page":"17","volume-title":"Proc. CHES 2014, Busan, South Korea, 23\u201326 September, LNCS 8731","author":"Oren","year":"2014"},{"key":"2023062010045980700_ref44","first-page":"282","volume-title":"Proc. ASIACRYPT 2014, Kaoshiung, Taiwan, China, 7\u201311 December, LNCS 8873","author":"Veyrat-Charvillon","year":"2014"},{"key":"2023062010045980700_ref45","first-page":"291","volume-title":"Proc. ASIACRYPT 2015, Auckland, New Zealand, 29 November - 3 December, LNCS 9453","author":"Grosso","year":"2015"},{"key":"2023062010045980700_ref46","first-page":"209","volume-title":"IACR Transactions on Cryptographic Hardware and Embedded Systems","author":"Guo","year":"2020"},{"key":"2023062010045980700_ref47","first-page":"2","volume-title":"Proc. CRYPTO 1990, Santa Barbara, California, USA, 11\u201315 August, LNCS 537","author":"Biham","year":"1990"},{"issue":"1","key":"2023062010045980700_ref48","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1007\/BF00630563","article-title":"Differential cryptanalysis of DES-like cryptsystems","volume":"4","author":"Biham","year":"1991","journal-title":"J. Cryptology"},{"key":"2023062010045980700_ref49","first-page":"487","volume-title":"Proc. CRYPTO 1992, Santa Barbara, California, USA, 16\u201320 August, LNCS 740","author":"Biham","year":"1992"},{"key":"2023062010045980700_ref50","first-page":"386","volume-title":"Proc. EUROCRYPT 1993, Lofthus, Norway, 23\u201327 May, LNCS 765","author":"Matsui","year":"1993"},{"key":"2023062010045980700_ref51","first-page":"1","volume-title":"Proc. CRYPTO 1994, Santa Barbara, California, USA, 21\u201325 August, LNCS 839","author":"Matsui","year":"1994"},{"key":"2023062010045980700_ref52","first-page":"163","volume-title":"Proc. SAC 2006, Montreal, Canada, 17\u201318 August, LNCS 4356","author":"Handschuh","year":"2006"},{"key":"2023062010045980700_ref53","first-page":"42","volume-title":"Proc. CARDIS 2017, Lugano, Switzerland, 13\u201315 November, LNCS 10728","author":"Reparaz","year":"2017"},{"key":"2023062010045980700_ref54","first-page":"95","volume-title":"IACR Transactions on Cryptographic Hardware and Embedded Systems","author":"Bhasin","year":"2020"},{"key":"2023062010045980700_ref55","first-page":"390","volume-title":"Proc. SAC 2012, Windsor, ON, Canada, 15\u201316 August, LNCS 7707","author":"Veyrat-Charvillon","year":"2012"},{"key":"2023062010045980700_ref56","first-page":"443","volume-title":"Proc. EUROCRYPT 2009, Cologne, Germany, 26\u201330 April, LNCS 5479","author":"Standaert","year":"2009"},{"key":"2023062010045980700_ref57","doi-asserted-by":"crossref","DOI":"10.1201\/b17668","volume-title":"Introduction to Modern Cryptography","author":"Katz","year":"2014","edition":"2nd"},{"key":"2023062010045980700_ref58","first-page":"240","volume-title":"Proc. EUROCRYPT 2016, Vienna, Austria, 8\u201312 May, LNCS 9665","author":"Durvaux","year":"2016"},{"key":"2023062010045980700_ref59","first-page":"26","volume-title":"Proc. CRYPTO 1994, Santa Barbara, California, USA, 21\u201325 August, LNCS 839","author":"Kaliski","year":"1994"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/6\/1434\/50643630\/bxac020.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/6\/1434\/50643630\/bxac020.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,20]],"date-time":"2023-06-20T10:07:47Z","timestamp":1687255667000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/66\/6\/1434\/6548382"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,3,14]]},"references-count":59,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2022,3,14]]},"published-print":{"date-parts":[[2023,6,19]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxac020","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"type":"print","value":"0010-4620"},{"type":"electronic","value":"1460-2067"}],"subject":[],"published-other":{"date-parts":[[2023,6]]},"published":{"date-parts":[[2022,3,14]]}}}