{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T12:54:31Z","timestamp":1785416071919,"version":"3.56.0"},"reference-count":41,"publisher":"International Association for Cryptologic Research","license":[{"start":{"date-parts":[[2024,7,8]],"date-time":"2024-07-08T00:00:00Z","timestamp":1720396800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IACR CiC"],"accepted":{"date-parts":[[2024,9,2]]},"abstract":"<jats:p>Software implementations of cryptographic algorithms often use masking schemes as a countermeasure against side channel attacks. A number of recent results show clearly the challenge of implementing masking schemes in such a way, that (unforeseen) micro-architectural effects do not cause masking flaws that undermine the intended security goal of an implementation. So far, utilising a higher-order version of the non-specific (fixed-vs-random) input test of the Test Vector Leakage Assessment (TVLA) framework has been the best option to identify such flaws. The drawbacks of this method are both its significant computation cost, as well as its inability to pinpoint which interaction of masking shares leads to the flaw. In this paper we propose a novel version, the fixed-vs-random shares test, to tackle both drawbacks. We explain our method and show its application to three case studies, where each time it outperforms its conventional TVLA counterpart. The drawback of our method is that it requires control over the shares, which, we argue, is practically feasible in the context of in-house evaluation and testing for software implementations.<\/jats:p>","DOI":"10.62056\/ab89ksdja","type":"journal-article","created":{"date-parts":[[2024,10,7]],"date-time":"2024-10-07T11:13:33Z","timestamp":1728299613000},"update-policy":"https:\/\/doi.org\/10.62056\/adfjwm02dj","source":"Crossref","is-referenced-by-count":1,"title":["Efficiently Detecting Masking Flaws in Software Implementations"],"prefix":"10.62056","author":[{"given":"Nima","family":"Mahdion","sequence":"first","affiliation":[{"id":[{"id":"https:\/\/ror.org\/05q9m0937","id-type":"ROR","asserted-by":"publisher"}],"name":"University of Klagenfurt","place":["Klagenfurt, Austria"],"department":["Digital Age Research Centre"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7502-3184","authenticated-orcid":false,"given":"Elisabeth","family":"Oswald","sequence":"additional","affiliation":[{"id":[{"id":"https:\/\/ror.org\/05q9m0937","id-type":"ROR","asserted-by":"publisher"}],"name":"University of Klagenfurt","place":["Klagenfurt, Austria"],"department":["Digital Age Research Centre"]},{"id":[{"id":"https:\/\/ror.org\/03angcq70","id-type":"ROR","asserted-by":"publisher"}],"name":"University of Birmingham","place":["Birmingham, United Kingdom"],"department":["Computer Science"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"48349","published-online":{"date-parts":[[2024,10,7]]},"reference":[{"key":"ref1:DBLP:conf\/crypto\/Kocher96","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1007\/3-540-68697-5_9","article-title":"Timing Attacks on Implementations of Diffie-Hellman, RSA,\n  DSS, and Other Systems","volume":"1109","author":"Paul C. Kocher","year":"1996"},{"key":"ref2:DBLP:conf\/ches\/BrierCO04","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1007\/978-3-540-28632-5_2","article-title":"Correlation Power Analysis with a Leakage Model","volume":"3156","author":"Eric Brier","year":"2004"},{"key":"ref3:DBLP:conf\/ches\/ChariRR02","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1007\/3-540-36400-5_3","article-title":"Template Attacks","volume":"2523","author":"Suresh Chari","year":"2002"},{"key":"ref4:Goodwill11","first-page":"115","article-title":"A testing methodology for side-channel resistance\n  validation","volume":"7","author":"Benjamin Jun Gilbert Goodwill","year":"2011"},{"key":"ref5:DBLP:conf\/ches\/SchneiderM15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"495","DOI":"10.1007\/978-3-662-48324-4_25","article-title":"Leakage Assessment Methodology - A Clear Roadmap for\n  Side-Channel Evaluations","volume":"9293","author":"Tobias Schneider","year":"2015"},{"key":"ref6:FIPS140_3","volume-title":"Security Requirements for Cryptographic Modules (FIPS PUB\n  140-3)","year":"2019"},{"key":"ref7:CC","volume-title":"The Common Criteria for Information Technology Security\n  Evaluation","author":"Common Criteria","year":"2017"},{"key":"ref8:DBLP:conf\/eurocrypt\/DurvauxS16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"240","DOI":"10.1007\/978-3-662-49890-3_10","article-title":"From Improved Leakage Detection to the Detection of Points\n  of Interests in Leakage Traces","volume":"9665","author":"Fran\u00e7ois Durvaux","year":"2016"},{"key":"ref9:DBLP:conf\/cosade\/DingCE16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"163","DOI":"10.1007\/978-3-319-43283-0_10","article-title":"Simpler, Faster, and More Robust T-Test Based Leakage\n  Detection","volume":"9689","author":"A. Adam Ding","year":"2016"},{"key":"ref10:DBLP:conf\/cardis\/Standaert18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"65","DOI":"10.1007\/978-3-030-15462-2_5","article-title":"How (Not) to Use Welch's T-Test in Side-Channel Security\n  Evaluations","volume":"11389","author":"Fran\u00e7ois-Xavier Standaert","year":"2018"},{"key":"ref11:TCHES:MRSS18","doi-asserted-by":"publisher","first-page":"209","DOI":"10.13154\/tches.v2018.i1.209-237","article-title":"Leakage Detection with the $\\chi^2$-Test","volume":"2018","author":"Amir Moradi","year":"2018","journal-title":"IACR TCHES","ISSN":"https:\/\/id.crossref.org\/issn\/2569-2925","issn-type":"electronic"},{"key":"ref12:EPRINT:ZhoQiaOu19","volume-title":"Leakage Detection with Kolmogorov-Smirnov Test","author":"Xinping Zhou","year":"2019"},{"key":"ref13:TCHES:BroSchSta19","doi-asserted-by":"publisher","first-page":"318","DOI":"10.13154\/tches.v2019.i2.318-345","article-title":"Multi-Tuple Leakage Detection and the Dependent Signal\n  Issue","volume":"2019","author":"Olivier Bronchain","year":"2019","journal-title":"IACR TCHES","ISSN":"https:\/\/id.crossref.org\/issn\/2569-2925","issn-type":"electronic"},{"key":"ref14:TCHES:MooWegMor21","doi-asserted-by":"publisher","first-page":"552","DOI":"10.46586\/tches.v2021.i3.552-598","article-title":"DL-LA: Deep Learning Leakage Assessment","volume":"2021","author":"Thorben Moos","year":"2021","journal-title":"IACR TCHES","ISSN":"https:\/\/id.crossref.org\/issn\/2569-2925","issn-type":"electronic"},{"key":"ref15:DBLP:journals\/scn\/YangJ21","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/6614702","article-title":"Side-Channel Leakage Detection with One-Way Analysis of\n  Variance","volume":"2021","author":"Wei Yang","year":"2021","journal-title":"Secur. Commun. Networks"},{"key":"ref16:DBLP:journals\/integration\/WangTWLT22","doi-asserted-by":"publisher","first-page":"182","DOI":"10.1016\/J.VLSI.2022.06.013","article-title":"The Levene test based-leakage assessment","volume":"87","author":"Yaru Wang","year":"2022","journal-title":"Integr."},{"key":"ref17:ARM_ARCH","volume-title":"ARM Achitecture","author":"ARM"},{"key":"ref18:TCHES:MarPagWeb22","doi-asserted-by":"publisher","first-page":"175","DOI":"10.46586\/tches.v2022.i1.175-220","article-title":"MIRACLE: MIcRo-ArChitectural Leakage Evaluation A\n  study of micro-architectural power leakage across many devices","volume":"2022","author":"Ben Marshall","year":"2022","journal-title":"IACR TCHES"},{"key":"ref19:AC:MOBW13","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"486","DOI":"10.1007\/978-3-642-42033-7_25","article-title":"Does My Device Leak Information? An a priori Statistical\n  Power Analysis of Leakage Detection Tests","volume":"8269","author":"Luke Mather","year":"2013"},{"key":"ref20:EC:DurSta16","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"240","DOI":"10.1007\/978-3-662-49890-3_10","article-title":"From Improved Leakage Detection to the Detection of Points\n  of Interests in Leakage Traces","volume":"9665","author":"Fran\u00e7ois Durvaux","year":"2016"},{"key":"ref21:DBLP:conf\/cardis\/DingZDSF17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"105","DOI":"10.1007\/978-3-319-75208-2_7","article-title":"Towards Sound and Optimal Leakage Detection Procedure","volume":"10728","author":"A. Adam Ding","year":"2017"},{"key":"ref22:C:IshSahWag03","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"463","DOI":"10.1007\/978-3-540-45146-4_27","article-title":"Private Circuits: Securing Hardware against Probing\n  Attacks","volume":"2729","author":"Yuval Ishai","year":"2003"},{"key":"ref23:DBLP:conf\/ccs\/GrossMK16","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1145\/2996366.2996426","article-title":"Domain-Oriented Masking: Compact Masked Hardware\n  Implementations with Arbitrary Protection Order","author":"Hannes Gro\u00df","year":"2016"},{"key":"ref24:RSA:GroManKor17","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"95","DOI":"10.1007\/978-3-319-52153-4_6","article-title":"An Efficient Side-Channel Protected AES Implementation\n  with Arbitrary Protection Order","volume":"10159","author":"Hannes Gro\u00df","year":"2017"},{"key":"ref25:DBLP:journals\/tc\/CassiersGLS21","doi-asserted-by":"publisher","first-page":"1677","DOI":"10.1109\/TC.2020.3022979","article-title":"Hardware Private Circuits: From Trivial Composition to Full\n  Verification","volume":"70","author":"Ga\u00ebtan Cassiers","year":"2021","journal-title":"IEEE Trans. Computers"},{"key":"ref26:scaleboard","volume-title":"SCALE: Side-Channel Attack Lab. Exercises","author":"Dan Page"},{"key":"ref27:Thumb16","volume-title":"Thumb-16-bit instruction set quick reference card","author":"ARM"},{"key":"ref28:EC:GouRiv17","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"567","DOI":"10.1007\/978-3-319-56620-7_20","article-title":"How Fast Can Higher-Order Masking Be in Software?","volume":"10210","author":"Dahmun Goudarzi","year":"2017"},{"key":"ref29:student1908probable","doi-asserted-by":"publisher","first-page":"1","DOI":"10.2307\/2331554","article-title":"The probable error of a mean","author":"Student","year":"1908","journal-title":"Biometrika"},{"key":"ref30:jan2011optimal","doi-asserted-by":"publisher","first-page":"1014","DOI":"10.3758\/s13428-011-0095-7","article-title":"Optimal sample sizes for Welch\u2019s test under various\n  allocation and cost considerations","volume":"43","author":"Show-Li Jan","year":"2011","journal-title":"Behavior research methods"},{"key":"ref31:welch1947generalization","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1093\/biomet\/34.1-2.28","article-title":"The generalization of `Student's\u2019 problem when several\n  different population variances are involved","volume":"34","author":"B. L. Welch","year":"1947","journal-title":"Biometrika","ISSN":"https:\/\/id.crossref.org\/issn\/0006-3444","issn-type":"electronic"},{"key":"ref32:FSE:Reparaz16","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"204","DOI":"10.1007\/978-3-662-52993-5_11","article-title":"Detecting Flawed Masking Schemes with Leakage Detection\n  Tests","volume":"9783","author":"Oscar Reparaz","year":"2016"},{"key":"ref33:DBLP:conf\/cardis\/BalaschGGRS14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1007\/978-3-319-16763-3_5","article-title":"On the Cost of Lazy Engineering for Masked Software\n  Implementations","volume":"8968","author":"Josep Balasch","year":"2014"},{"key":"ref34:AES-FIPS","volume-title":"Advanced Encryption Standard (AES)","year":"2001"},{"key":"ref35:DBLP:journals\/tc\/ProuffRB09","doi-asserted-by":"publisher","first-page":"799","DOI":"10.1109\/TC.2009.15","article-title":"Statistical Analysis of Second Order Differential Power\n  Analysis","volume":"58","author":"Emmanuel Prouff","year":"2009","journal-title":"IEEE Trans. Computers"},{"key":"ref36:CHES:RivPro10","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"413","DOI":"10.1007\/978-3-642-15031-9_28","article-title":"Provably Secure Higher-Order Masking of AES","volume":"6225","author":"Matthieu Rivain","year":"2010"},{"key":"ref37:ICICS:NikRecRij06","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"529","DOI":"10.1007\/11935308_38","article-title":"Threshold Implementations Against Side-Channel Attacks and\n  Glitches","volume":"4307","author":"Svetla Nikova","year":"2006"},{"key":"ref38:C:RBNGV15","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"764","DOI":"10.1007\/978-3-662-47989-6_37","article-title":"Consolidating Masking Schemes","volume":"9215","author":"Oscar Reparaz","year":"2015"},{"key":"ref39:DBLP:conf\/eurocrypt\/GaoOP22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"284","DOI":"10.1007\/978-3-031-07082-2_11","article-title":"Towards Micro-architectural Leakage Simulators: Reverse\n  Engineering Micro-architectural Leakage Features Is Practical","volume":"13277","author":"Si Gao","year":"2022"},{"key":"ref40:CCS:KniMor22","doi-asserted-by":"publisher","first-page":"1799","DOI":"10.1145\/3548606.3559362","article-title":"Low-Latency Hardware Private Circuits","author":"David Knichel","year":"2022"},{"key":"ref41:CCS:FGMRSSS23","doi-asserted-by":"publisher","first-page":"990","DOI":"10.1145\/3576915.3623129","article-title":"Combined Private Circuits - Combined Security Refurbished","author":"Jakob Feldtkeller","year":"2023"}],"container-title":["IACR Communications in Cryptology"],"original-title":[],"language":"en","deposited":{"date-parts":[[2024,12,10]],"date-time":"2024-12-10T16:28:36Z","timestamp":1733848116000},"score":1,"resource":{"primary":{"URL":"https:\/\/cic.iacr.org\/p\/1\/3\/35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,7]]},"references-count":41,"URL":"https:\/\/doi.org\/10.62056\/ab89ksdja","archive":["Internet Archive","Internet Archive"],"relation":{},"ISSN":["3006-5496"],"issn-type":[{"value":"3006-5496","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10,7]]},"assertion":[{"value":"2024-07-08","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-09-02","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"cc1-3-99"}}