Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation

This paper introduces and analyzes Triplex, a leakage-resistant mode of operation based on Tweakable Block Ciphers (TBCs) with 2n-bit tweaks. Triplex enjoys beyond-birthday ciphertext integrity in the presence of encryption and decryption leakage in a liberal model where all intermediate computatio...

Full description

Bibliographic Details
Main Authors: Yaobin Shen, Thomas Peters, François-Xavier Standaert, Gaëtan Cassiers, Corentin Verhamme
Format: Article
Language:English
Published: Ruhr-Universität Bochum 2022-08-01
Series:Transactions on Cryptographic Hardware and Embedded Systems
Subjects:
Online Access:https://ojs-dev.ub.rub.de/index.php/TCHES/article/view/9816
_version_ 1797690045881122816
author Yaobin Shen
Thomas Peters
François-Xavier Standaert
Gaëtan Cassiers
Corentin Verhamme
author_facet Yaobin Shen
Thomas Peters
François-Xavier Standaert
Gaëtan Cassiers
Corentin Verhamme
author_sort Yaobin Shen
collection DOAJ
description This paper introduces and analyzes Triplex, a leakage-resistant mode of operation based on Tweakable Block Ciphers (TBCs) with 2n-bit tweaks. Triplex enjoys beyond-birthday ciphertext integrity in the presence of encryption and decryption leakage in a liberal model where all intermediate computations are leaked in full and only two TBC calls operating a long-term secret are protected with implementationlevel countermeasures. It provides beyond-birthday confidentiality guarantees without leakage, and standard confidentiality guarantees with leakage for a single-pass mode embedding a re-keying process for the bulk of its computations (i.e., birthday confidentiality with encryption leakage under a bounded leakage assumption). Triplex improves leakage-resistant modes of operation relying on TBCs with n-bit tweaks when instantiated with large-tweak TBCs like Deoxys-TBC (a CAESAR competition laureate) or Skinny (used by the Romulus finalist of the NIST lightweight crypto competition). Its security guarantees are maintained in the multi-user setting.
first_indexed 2024-03-12T01:53:55Z
format Article
id doaj.art-14dbd7b01ef442a194858e376f38386c
institution Directory Open Access Journal
issn 2569-2925
language English
last_indexed 2024-03-12T01:53:55Z
publishDate 2022-08-01
publisher Ruhr-Universität Bochum
record_format Article
series Transactions on Cryptographic Hardware and Embedded Systems
spelling doaj.art-14dbd7b01ef442a194858e376f38386c2023-09-08T07:01:11ZengRuhr-Universität BochumTransactions on Cryptographic Hardware and Embedded Systems2569-29252022-08-012022410.46586/tches.v2022.i4.135-162Triplex: an Efficient and One-Pass Leakage-Resistant Mode of OperationYaobin Shen0Thomas Peters1François-Xavier Standaert2Gaëtan Cassiers3Corentin Verhamme4UCLouvain, ICTEAM, Crypto Group, Louvain-la-Neuve, BelgiumUCLouvain, ICTEAM, Crypto Group, Louvain-la-Neuve, BelgiumUCLouvain, ICTEAM, Crypto Group, Louvain-la-Neuve, BelgiumUCLouvain, ICTEAM, Crypto Group, Louvain-la-Neuve, BelgiumUCLouvain, ICTEAM, Crypto Group, Louvain-la-Neuve, Belgium This paper introduces and analyzes Triplex, a leakage-resistant mode of operation based on Tweakable Block Ciphers (TBCs) with 2n-bit tweaks. Triplex enjoys beyond-birthday ciphertext integrity in the presence of encryption and decryption leakage in a liberal model where all intermediate computations are leaked in full and only two TBC calls operating a long-term secret are protected with implementationlevel countermeasures. It provides beyond-birthday confidentiality guarantees without leakage, and standard confidentiality guarantees with leakage for a single-pass mode embedding a re-keying process for the bulk of its computations (i.e., birthday confidentiality with encryption leakage under a bounded leakage assumption). Triplex improves leakage-resistant modes of operation relying on TBCs with n-bit tweaks when instantiated with large-tweak TBCs like Deoxys-TBC (a CAESAR competition laureate) or Skinny (used by the Romulus finalist of the NIST lightweight crypto competition). Its security guarantees are maintained in the multi-user setting. https://ojs-dev.ub.rub.de/index.php/TCHES/article/view/9816Leakage-ResistanceAuthenticated EncryptionSingle-Pass Modes
spellingShingle Yaobin Shen
Thomas Peters
François-Xavier Standaert
Gaëtan Cassiers
Corentin Verhamme
Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation
Transactions on Cryptographic Hardware and Embedded Systems
Leakage-Resistance
Authenticated Encryption
Single-Pass Modes
title Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation
title_full Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation
title_fullStr Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation
title_full_unstemmed Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation
title_short Triplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation
title_sort triplex an efficient and one pass leakage resistant mode of operation
topic Leakage-Resistance
Authenticated Encryption
Single-Pass Modes
url https://ojs-dev.ub.rub.de/index.php/TCHES/article/view/9816
work_keys_str_mv AT yaobinshen triplexanefficientandonepassleakageresistantmodeofoperation
AT thomaspeters triplexanefficientandonepassleakageresistantmodeofoperation
AT francoisxavierstandaert triplexanefficientandonepassleakageresistantmodeofoperation
AT gaetancassiers triplexanefficientandonepassleakageresistantmodeofoperation
AT corentinverhamme triplexanefficientandonepassleakageresistantmodeofoperation