An update on the side channel cryptanalysis of MACs based on cryptographic hash functions

Praveen Gauravaram; Katsuyuki Okeya

An update on the side channel cryptanalysis of MACs based on cryptographic hash functions

Praveen Gauravaram, Katsuyuki Okeya

Hitachi, Ltd.

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

Okeya has established that HMAC/NMAC implementations based on only Matyas-Meyer-Oseas (MMO) PGV scheme and his two refined PGV schemes are secure against side channel DPA attacks when the block cipher in these constructions is secure against these attacks. The significant result of Okeya's analysis is that the implementations of HMAC/NMAC with the Davies-Meyer (DM) compression function based hash functions such as MD5 and SHA-1 are vulnerable to side channel attacks. In this paper, first we show a partial key recovery attack on NMAC/HMAC based on Okeya's two refined PGV schemes by taking practical constraints into consideration. Next, we propose new hybrid NMAC/HMAC schemes for security against side channel attacks assuming that their underlying block cipher is ideal. We then show that M-NMAC, MDx-MAC and a variant of the envelope MAC scheme based on DM with an ideal block cipher are secure against DPA attacks.

Original language	English
Title of host publication	INDOCRYPT 2007 : 8th International Conference on Cryptology in India
Editors	Kannan Srinathan, Pandu Rangan, Moti Yung
Volume	4859
Place of Publication	Berlin Heidelberg
Publisher	Springer Verlag
Publication date	2007
Pages	393-403
ISBN (Print)	978-3-540-77025-1
Publication status	Published - 2007
Event	8th International Conference on Cryptology in India: Progress in Cryptology - Chennai, India Duration: 9 Dec 2007 → 13 Dec 2007 Conference number: 8 http://www.informatik.uni-trier.de/~ley/db/conf/indocrypt/indocrypt2007.html

Conference

Conference	8th International Conference on Cryptology in India
Number	8
Country/Territory	India
City	Chennai
Period	09/12/2007 → 13/12/2007
Internet address	http://www.informatik.uni-trier.de/~ley/db/conf/indocrypt/indocrypt2007.html

Series	Lecture Notes in Computer Science
Number	4859

Bibliographical note

This content in the paper is supported by The Danish Research Council for Technology and Production Sciences grant no. 274-05-0151 and partly supported by National Institute of Information and Communications Technology (NICT), Japan.

Keywords

RDPA
DPA,
MDx-MAC
HMAC
M-NMAC
Side channel attacks

OpenUrl availability

Full text

Cite this

@inproceedings{27808239832e42cd86ed43e663ee0362,

title = "An update on the side channel cryptanalysis of MACs based on cryptographic hash functions",

abstract = "Okeya has established that HMAC/NMAC implementations based on only Matyas-Meyer-Oseas (MMO) PGV scheme and his two refined PGV schemes are secure against side channel DPA attacks when the block cipher in these constructions is secure against these attacks. The significant result of Okeya's analysis is that the implementations of HMAC/NMAC with the Davies-Meyer (DM) compression function based hash functions such as MD5 and SHA-1 are vulnerable to side channel attacks. In this paper, first we show a partial key recovery attack on NMAC/HMAC based on Okeya's two refined PGV schemes by taking practical constraints into consideration. Next, we propose new hybrid NMAC/HMAC schemes for security against side channel attacks assuming that their underlying block cipher is ideal. We then show that M-NMAC, MDx-MAC and a variant of the envelope MAC scheme based on DM with an ideal block cipher are secure against DPA attacks.",

keywords = "RDPA, DPA,, MDx-MAC, HMAC, M-NMAC, Side channel attacks",

author = "Praveen Gauravaram and Katsuyuki Okeya",

note = "This content in the paper is supported by The Danish Research Council for Technology and Production Sciences grant no. 274-05-0151 and partly supported by National Institute of Information and Communications Technology (NICT), Japan.; 8th International Conference on Cryptology in India : Progress in Cryptology , INDOCRYPT 2007 ; Conference date: 09-12-2007 Through 13-12-2007",

year = "2007",

language = "English",

isbn = "978-3-540-77025-1",

volume = "4859",

series = "Lecture Notes in Computer Science",

publisher = "Springer Verlag",

number = "4859",

pages = "393--403",

editor = "Kannan Srinathan and Pandu Rangan and Moti Yung",

booktitle = "INDOCRYPT 2007",

address = "Germany",

url = "http://www.informatik.uni-trier.de/~ley/db/conf/indocrypt/indocrypt2007.html",

}

Gauravaram, P & Okeya, K 2007, An update on the side channel cryptanalysis of MACs based on cryptographic hash functions. in K Srinathan, P Rangan & M Yung (eds), INDOCRYPT 2007: 8th International Conference on Cryptology in India. vol. 4859, Springer Verlag, Berlin Heidelberg, Lecture Notes in Computer Science, no. 4859, pp. 393-403, 8th International Conference on Cryptology in India, Chennai, India, 09/12/2007.

An update on the side channel cryptanalysis of MACs based on cryptographic hash functions. / Gauravaram, Praveen; Okeya, Katsuyuki.
INDOCRYPT 2007: 8th International Conference on Cryptology in India. ed. / Kannan Srinathan; Pandu Rangan; Moti Yung. Vol. 4859 Berlin Heidelberg: Springer Verlag, 2007. p. 393-403 (Lecture Notes in Computer Science; No. 4859).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - An update on the side channel cryptanalysis of MACs based on cryptographic hash functions

AU - Gauravaram, Praveen

AU - Okeya, Katsuyuki

N1 - Conference code: 8

PY - 2007

Y1 - 2007

N2 - Okeya has established that HMAC/NMAC implementations based on only Matyas-Meyer-Oseas (MMO) PGV scheme and his two refined PGV schemes are secure against side channel DPA attacks when the block cipher in these constructions is secure against these attacks. The significant result of Okeya's analysis is that the implementations of HMAC/NMAC with the Davies-Meyer (DM) compression function based hash functions such as MD5 and SHA-1 are vulnerable to side channel attacks. In this paper, first we show a partial key recovery attack on NMAC/HMAC based on Okeya's two refined PGV schemes by taking practical constraints into consideration. Next, we propose new hybrid NMAC/HMAC schemes for security against side channel attacks assuming that their underlying block cipher is ideal. We then show that M-NMAC, MDx-MAC and a variant of the envelope MAC scheme based on DM with an ideal block cipher are secure against DPA attacks.

AB - Okeya has established that HMAC/NMAC implementations based on only Matyas-Meyer-Oseas (MMO) PGV scheme and his two refined PGV schemes are secure against side channel DPA attacks when the block cipher in these constructions is secure against these attacks. The significant result of Okeya's analysis is that the implementations of HMAC/NMAC with the Davies-Meyer (DM) compression function based hash functions such as MD5 and SHA-1 are vulnerable to side channel attacks. In this paper, first we show a partial key recovery attack on NMAC/HMAC based on Okeya's two refined PGV schemes by taking practical constraints into consideration. Next, we propose new hybrid NMAC/HMAC schemes for security against side channel attacks assuming that their underlying block cipher is ideal. We then show that M-NMAC, MDx-MAC and a variant of the envelope MAC scheme based on DM with an ideal block cipher are secure against DPA attacks.

KW - RDPA

KW - DPA,

KW - MDx-MAC

KW - HMAC

KW - M-NMAC

KW - Side channel attacks

M3 - Article in proceedings

SN - 978-3-540-77025-1

VL - 4859

T3 - Lecture Notes in Computer Science

SP - 393

EP - 403

BT - INDOCRYPT 2007

A2 - Srinathan, Kannan

A2 - Rangan, Pandu

A2 - Yung, Moti

PB - Springer Verlag

CY - Berlin Heidelberg

T2 - 8th International Conference on Cryptology in India

Y2 - 9 December 2007 through 13 December 2007

ER -

An update on the side channel cryptanalysis of MACs based on cryptographic hash functions

Abstract

Conference

Bibliographical note

Keywords

OpenUrl availability

Fingerprint

Cite this