{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:30:39Z","timestamp":1750221039377,"version":"3.41.0"},"reference-count":30,"publisher":"Association for Computing Machinery (ACM)","issue":"6","license":[{"start":{"date-parts":[[2018,11,6]],"date-time":"2018-11-06T00:00:00Z","timestamp":1541462400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100007601","name":"Horizon 2020","doi-asserted-by":"publisher","award":["644052"],"award-info":[{"award-number":["644052"]}],"id":[{"id":"10.13039\/501100007601","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Des. Autom. Electron. Syst."],"published-print":{"date-parts":[[2018,11,30]]},"abstract":"<jats:p>\n            Implementing a cryptographic circuit poses challenges not always acknowledged in the backing mathematical theory. One of them is the vulnerability against\n            <jats:italic>side-channel attacks<\/jats:italic>\n            . A side-channel attack is a procedure that uses information leaked by the circuit through, for example, its own power consumption or electromagnetic emissions, to derive sensitive data (e.g, the secret key used for encryption). Nowadays, we design circuitry to keep this sensitive information from leaking (i.e., a\n            <jats:italic>countermeasure<\/jats:italic>\n            ), but the path from specification down to implementation is far from being fully automatic. As we know, manual refinement steps can be error prone and the sheer potential of these errors can be devastating in a scenario such as the one we are dealing with.\n          <\/jats:p>\n          <jats:p>\n            In this article, we investigate whether a single embedded domain specific language (EDSL) can, at the same time, help us in specifying and enforcing the functionality of the circuit as well as its protection against side-channel attacks. The EDSL is a fundamental block of an original design flow (named Countermeasure Against Side-Channel Attacks, i.e., CASCA) whose aim is to complement an existing industrial scenario and to provide the necessary guarantee that a secure primitive is not vulnerable up to a first-order attack. As a practical case study, we will show how we applied the proposed tools to ensure both functional and extra-functional correctness of a composite-field Advanced Encryption Standard (AES) S-Box. To ensure the reproducibility of this research, this article is accompanied by an open source release of the EDSL\n            <jats:sup>1<\/jats:sup>\n            that contains the presented S-Box implementation and an additional 3-Shares threshold implementation of the Keccak \u03c7 function [7].\n          <\/jats:p>","DOI":"10.1145\/3241047","type":"journal-article","created":{"date-parts":[[2018,11,6]],"date-time":"2018-11-06T13:36:47Z","timestamp":1541511407000},"page":"1-17","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["CASCA"],"prefix":"10.1145","volume":"23","author":[{"given":"Lorenzo","family":"Delledonne","sequence":"first","affiliation":[{"name":"STMicroelectronics, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vittorio","family":"Zaccaria","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ruggero","family":"Susella","sequence":"additional","affiliation":[{"name":"STMicroelectronics, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guido","family":"Bertoni","sequence":"additional","affiliation":[{"name":"Security Pattern, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Filippo","family":"Melzani","sequence":"additional","affiliation":[{"name":"Security Pattern, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,11,6]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-45340-3_2"},{"volume-title":"Smart Card Research and Advanced Applications","author":"Barthe Gilles","key":"e_1_2_1_3_1","unstructured":"Gilles Barthe , Sonia Bela\u00efd , Fran\u00e7ois Dupressoir , Pierre-Alain Fouque , Benjamin Gr\u00e9goire , and Pierre-Yves Strub . 2015. Verified proofs of higher-order masking . In Smart Card Research and Advanced Applications . Springer Berlin , Berlin, Germany , 457--485. Gilles Barthe, Sonia Bela\u00efd, Fran\u00e7ois Dupressoir, Pierre-Alain Fouque, Benjamin Gr\u00e9goire, and Pierre-Yves Strub. 2015. Verified proofs of higher-order masking. In Smart Card Research and Advanced Applications. Springer Berlin, Berlin, Germany, 457--485."},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-010-9084-8"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_17"},{"key":"e_1_2_1_6_1","unstructured":"Guido Bertoni Joan Daemen Micha\u00ebl Peeters and Gilles Van Assche. 2010. Building power analysis resistant implementations of Keccak. Second SHA-3 Candidate Conference.  Guido Bertoni Joan Daemen Micha\u00ebl Peeters and Gilles Van Assche. 2010. Building power analysis resistant implementations of Keccak. Second SHA-3 Candidate Conference."},{"volume-title":"Smart Card Research and Advanced Applications (Lecture Notes in Computer Science)","author":"Bilgin Beg\u00fcl","key":"e_1_2_1_7_1","unstructured":"Beg\u00fcl Bilgin , Joan Daemen , Ventzislav Nikov , Svetla Nikova , Vincent Rijmen , and Gilles Van Assche . 2013. Efficient and first-order DPA resistant implementations of Keccak . In Smart Card Research and Advanced Applications (Lecture Notes in Computer Science) . Springer , Cham , 187--199. Beg\u00fcl Bilgin, Joan Daemen, Ventzislav Nikov, Svetla Nikova, Vincent Rijmen, and Gilles Van Assche. 2013. Efficient and first-order DPA resistant implementations of Keccak. In Smart Card Research and Advanced Applications (Lecture Notes in Computer Science). Springer, Cham, 187--199."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2016.2635650"},{"key":"e_1_2_1_9_1","volume-title":"Proceedings of 6th International Workshop on Cryptographic Hardware and Embedded Systems (CHES'04)","author":"Brier Eric","year":"2004","unstructured":"Eric Brier , Christophe Clavier , and Francis Olivier . 2004 . Chapter Correlation Power Analysis with a Leakage Model . In Proceedings of 6th International Workshop on Cryptographic Hardware and Embedded Systems (CHES'04) , Cambridge, MA, August 11--13 , 2004. Springer Berlin, Berlin, Germany, 16--29. Eric Brier, Christophe Clavier, and Francis Olivier. 2004. Chapter Correlation Power Analysis with a Leakage Model. In Proceedings of 6th International Workshop on Cryptographic Hardware and Embedded Systems (CHES'04), Cambridge, MA, August 11--13, 2004. Springer Berlin, Berlin, Germany, 16--29."},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.5555\/1784774.1784796"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74735-2_3"},{"volume-title":"Smart Card Research and Advanced Applications","author":"Coron Jean-S\u00e9bastien","key":"e_1_2_1_12_1","unstructured":"Jean-S\u00e9bastien Coron , Emmanuel Prouff , Matthieu Rivain , and Thomas Roche . 2014. Higher-order side channel security and mask refreshing . In Smart Card Research and Advanced Applications . Springer Berlin , Berlin, Germany , 410--424. Jean-S\u00e9bastien Coron, Emmanuel Prouff, Matthieu Rivain, and Thomas Roche. 2014. Higher-order side channel security and mask refreshing. In Smart Card Research and Advanced Applications. Springer Berlin, Berlin, Germany, 410--424."},{"volume-title":"The Design of Rijndael: AES-the Advanced Encryption Standard","author":"Daemen Joan","key":"e_1_2_1_13_1","unstructured":"Joan Daemen and Vincent Rijmen . 2013. The Design of Rijndael: AES-the Advanced Encryption Standard . Springer Science 8 Business Media. Joan Daemen and Vincent Rijmen. 2013. The Design of Rijndael: AES-the Advanced Encryption Standard. Springer Science 8 Business Media."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2014.2387830"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/551789.853532"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.3390\/jlpea7010004"},{"volume-title":"Typed Tagless Final Interpreters","author":"Kiselyov Oleg","key":"e_1_2_1_17_1","unstructured":"Oleg Kiselyov . 2012. Typed Tagless Final Interpreters . Springer Berlin , Berlin, Germany , 130--174. Oleg Kiselyov. 2012. Typed Tagless Final Interpreters. Springer Berlin, Berlin, Germany, 130--174."},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44709-3_3"},{"volume-title":"2017 IEEE International Conference on Computer Design (ICCD). 541--544","author":"Luo P.","key":"e_1_2_1_19_1","unstructured":"P. Luo , K. Athanasiou , L. Zhang , Z. H. Jiang , Y. Fei , A. A. Ding , and T. Wahl . 2017. Compiler-assisted threshold implementation against power analysis attacks . In 2017 IEEE International Conference on Computer Design (ICCD). 541--544 . P. Luo, K. Athanasiou, L. Zhang, Z. H. Jiang, Y. Fei, A. A. Ding, and T. Wahl. 2017. Compiler-assisted threshold implementation against power analysis attacks. In 2017 IEEE International Conference on Computer Design (ICCD). 541--544."},{"volume-title":"Categories for the Working Mathematician","author":"MacLane Saunders","key":"e_1_2_1_20_1","unstructured":"Saunders MacLane . 1971. Categories for the Working Mathematician . Springer-Verlag , New York . ix+262 pages. Graduate Texts in Mathematics, Vol. 5 . Saunders MacLane. 1971. Categories for the Working Mathematician. Springer-Verlag, New York. ix+262 pages. Graduate Texts in Mathematics, Vol. 5."},{"volume-title":"Power Analysis Attacks: Revealing the Secrets of Smart Cards","author":"Mangard Stefan","key":"e_1_2_1_21_1","unstructured":"Stefan Mangard , Elisabeth Oswald , and Thomas Popp . 2007. Power Analysis Attacks: Revealing the Secrets of Smart Cards . Springer-Verlag New York, Inc. Stefan Mangard, Elisabeth Oswald, and Thomas Popp. 2007. Power Analysis Attacks: Revealing the Secrets of Smart Cards. Springer-Verlag New York, Inc."},{"key":"e_1_2_1_22_1","unstructured":"Simon Marlow. 2010. Haskell 2010 Language Report. Retrieved from http:\/\/www.haskell.org.  Simon Marlow. 2010. Haskell 2010 Language Report. Retrieved from http:\/\/www.haskell.org."},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33027-8_4"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/11502760_28"},{"key":"e_1_2_1_26_1","volume-title":"CHES","author":"Rivain Matthieu","year":"2010","unstructured":"Matthieu Rivain and Emmanuel Prouff . 2010 . Provably secure higher-order masking of AES. In Cryptographic Hardware and Embedded Systems , CHES 2010. Springer Berlin, 413--427. Matthieu Rivain and Emmanuel Prouff. 2010. Provably secure higher-order masking of AES. In Cryptographic Hardware and Embedded Systems, CHES 2010. Springer Berlin, 413--427."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/11605805_14"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.3233\/SAT190034"},{"key":"e_1_2_1_29_1","volume-title":"28th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Lecture Notes in Computer Science)","volume":"5479","author":"Standaert Fran\u00e7ois-Xavier","year":"2009","unstructured":"Fran\u00e7ois-Xavier Standaert , Tal Malkin , and Moti Yung . 2009 . A unified framework for the analysis of side-channel key recovery attacks. In Advances in Cryptology\u2014EUROCRYPT 2009 , 28th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Lecture Notes in Computer Science) , Vol. 5479 . Springer, 443--461. Fran\u00e7ois-Xavier Standaert, Tal Malkin, and Moti Yung. 2009. A unified framework for the analysis of side-channel key recovery attacks. In Advances in Cryptology\u2014EUROCRYPT 2009, 28th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Lecture Notes in Computer Science), Vol. 5479. Springer, 443--461."},{"volume-title":"Advanced Functional Programming, First International Spring School on Advanced Functional Programming Techniques-Tutorial Text","author":"Wadler Philip","key":"e_1_2_1_30_1","unstructured":"Philip Wadler . 1995. Monads for functional programming . In Advanced Functional Programming, First International Spring School on Advanced Functional Programming Techniques-Tutorial Text . Springer-Verlag , London, UK , 24--52. http:\/\/dl.acm.org\/citation.cfm?id&equals;647698.734146 Philip Wadler. 1995. Monads for functional programming. In Advanced Functional Programming, First International Spring School on Advanced Functional Programming Techniques-Tutorial Text. Springer-Verlag, London, UK, 24--52. http:\/\/dl.acm.org\/citation.cfm?id&equals;647698.734146"},{"volume-title":"An ASIC Implementation of the AES SBoxes","author":"Wolkerstorfer Johannes","key":"e_1_2_1_32_1","unstructured":"Johannes Wolkerstorfer , Elisabeth Oswald , and Mario Lamberger . 2002. An ASIC Implementation of the AES SBoxes . Springer Berlin , Berlin, Germany , 67--78. Johannes Wolkerstorfer, Elisabeth Oswald, and Mario Lamberger. 2002. An ASIC Implementation of the AES SBoxes. Springer Berlin, Berlin, Germany, 67--78."},{"key":"e_1_2_1_33_1","volume-title":"An adaptable, modular, and autonomous side-channel vulnerability evaluator. HOST","author":"Zohner Michael","year":"2012","unstructured":"Michael Zohner , Marc St\u00f6ttinger , Sorin A. Huss , and Oliver Stein . 2012. An adaptable, modular, and autonomous side-channel vulnerability evaluator. HOST ( 2012 ), 43--48. Michael Zohner, Marc St\u00f6ttinger, Sorin A. Huss, and Oliver Stein. 2012. An adaptable, modular, and autonomous side-channel vulnerability evaluator. HOST (2012), 43--48."}],"container-title":["ACM Transactions on Design Automation of Electronic Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3241047","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3241047","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:43:46Z","timestamp":1750207426000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3241047"}},"subtitle":["A Design Automation Approach for Designing Hardware Countermeasures Against Side-Channel Attacks"],"short-title":[],"issued":{"date-parts":[[2018,11,6]]},"references-count":30,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2018,11,30]]}},"alternative-id":["10.1145\/3241047"],"URL":"https:\/\/doi.org\/10.1145\/3241047","relation":{},"ISSN":["1084-4309","1557-7309"],"issn-type":[{"type":"print","value":"1084-4309"},{"type":"electronic","value":"1557-7309"}],"subject":[],"published":{"date-parts":[[2018,11,6]]},"assertion":[{"value":"2018-02-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2018-07-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2018-11-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}