[en] Message Authentication Code construction Alred and its AES-based instance Alpha-MAC were introduced by Daemen and Rijmen in 2005. We show that under certain assumptions about its implementation (namely that keyed parts are perfectly protected against side-channel attacks but bulk hashing rounds are not) one can efficiently attack this function. We propose a side-channel collision attack on this MAC recovering its internal state just after 29 measurements in the known-message scenario which is to be compared to 40 measurements required by collision attacks on AES in the chosen-plaintext scenario. Having recovered the internal state, we mount a selective forgery attack using new 4 to 1 round collisions working with negligible memory and time complexity.
Disciplines :
Sciences informatiques
Identifiants :
UNILU:UL-CONFERENCE-2011-179
Auteur, co-auteur :
BIRYUKOV, Alex ; University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)
Bogdanov, Andrey; Ruhr-University, Bochum
KHOVRATOVICH, Dmitry ; University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)
Kasper, Timo; Ruhr-University, Bochum
Langue du document :
Anglais
Titre :
Collision Attacks on AES-Based MAC: Alpha-MAC
Date de publication/diffusion :
2007
Nom de la manifestation :
Cryptographic Hardware and Embedded Systems - CHES 2007, 9th International Workshop
Lieu de la manifestation :
Vienna, Autriche
Date de la manifestation :
September 10-13
Manifestation à portée :
International
Titre de l'ouvrage principal :
Cryptographic Hardware and Embedded Systems - CHES 2007
Daemen, J., Rijmen, V.: A new MAC construction Aired and a Specific Instance Alpha-MAC. In: Gilbert, H., Handschuh, H. (eds.) FSE 2005. LNCS, vol. 3557, pp. 1-17. Springer, Heidelberg (2005)
Huanga, J., Seberry, J., Susilo, W.: On the internal structure of Alpha-MAC. In: Nguyen, P.Q. (ed.) VIETCRYPT 2006. LNCS, vol. 4341, Springer, Heidelberg (2006)
Schramm, K., Wollinger, T., Paar, C.: A New Class of Collision Attacks and Its Application to DES. In: Johansson, T. (ed.) FSE 2003. LNCS, vol. 2887, pp. 206-222. Springer, Heidelberg (2003)
Schramm, K., Leander, G., Felke, P., Paar, C.: A Collision-Attack on AES: Combining Side Channel- and Differential-Attack. In: Joye, M., Quisquater, J.-J. (eds.) CHES 2004. LNCS, vol. 3156, pp. 163-175. Springer, Heidelberg (2004)
Osvik, D.A., Shamir, A., Tromer, E.: Cache Attacks and Countermeasures: The Case of AES. In: Pointcheval, D. (ed.) CT-RSA 2006. LNCS, vol. 3860, Springer, Heidelberg (2006)
Handschuh, H., Preneel, B.: Blind differential cryptanalysis for enhanced power attacks. In: SAC'06. LNCS, Springer, Heidelberg (2006)
Daemen, J., Rijmen, V.: The Design of Rijndael: AES- The Advanced Encryption Standard. Springer, Heidelberg (2002)
Daemen, J., Rijmen, V.: The Pelican MAC Function. Available at (2005), http ://eprint.iacr.org/2005/088.pdf
Microchip: PIC16F687 Microcontroller Data Sheet (2007)
Lechner, J., Tatzgern, M.: Efficient implementation of the AES Encryption Algorithm for Smart-cards. Available at (2004), www.iaik.tugraz.at
Oswald, E., Mangard, S., Pramstaller, N.. Rijmen, V.: A Side-Channel Analysis Resistant Description of the AES S-box. In: Gilbert, H.. Handschuh. H. (eds.) FSE 2005. LNCS, vol. 3557. Springer, Heidelberg (2005)
Oswald, E., Schramm, K.: An efficient masking scheme for aes software implementations. In: Song, J., Kwon, T., Yung, M. (eds.) WISA 2005. LNCS, vol. 3786. Springer, Heidelberg (2006)
Herbst, C., Oswald, E., Mangard, S.: An AES Implementation Resistant to Power Analysis Attacks. In: Zhou, J., Yung, M., Bao, F. (eds.) ACNS 2006. LNCS, vol. 3989. Springer, Heidelberg (2006)
