Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible Nonces
Since its birth in 2000, authenticated encryption (AE) has been a hot research topic, and many new features have been proposed to boost its security or performance. The Block cipher was the dominant primitive in constructing AE schemes, followed by stream ciphers and compression functions until the...
| Main Authors: | , , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2022-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/9766118/ |
| _version_ | 1811246723255762944 |
|---|---|
| author | Mohamud Ahmed Jimale Muhammad Reza Z'aba Miss Laiha Binti Mat Kiah Mohd Yamani Idna Idris Norziana Jamil Moesfa Soeheila Mohamad Mohd Saufy Rohmad |
| author_facet | Mohamud Ahmed Jimale Muhammad Reza Z'aba Miss Laiha Binti Mat Kiah Mohd Yamani Idna Idris Norziana Jamil Moesfa Soeheila Mohamad Mohd Saufy Rohmad |
| author_sort | Mohamud Ahmed Jimale |
| collection | DOAJ |
| description | Since its birth in 2000, authenticated encryption (AE) has been a hot research topic, and many new features have been proposed to boost its security or performance. The Block cipher was the dominant primitive in constructing AE schemes, followed by stream ciphers and compression functions until the sponge construction emerged in 2011. Sponge-based AE schemes provide functional characteristics such as parallelizability, incrementality, and being online. They also offer security features for protection against active or passive adversaries. Currently, there exist parallel sponge-based AE schemes, but they are not protected against simple power analysis (SPA) and differential power analysis (DPA). On the other hand, sponge-based AE schemes that protect against such attacks are serial and cannot be parallelized. Furthermore, sponge-based AE schemes handle the nonces in a way that could allow misuse. So, sponge-based AE schemes that hide the nonce from adversaries are also an open problem. This work aims to bridge these gaps by proposing a parallel sponge-based AE with side-channel protection and adversary-invisible nonces (PSASPIN), using parallel fresh rekeying and the duplex mode of the sponge construction. A leveled implementation is used to implement the key generation part using a pseudorandom function (PRF) based on the Galois field multiplication. The data processing (the rekeyed) part is implemented using the sponge-based duplex mode. Finally, the security proof of the proposed scheme is provided using game-based theory according to the PRP/PRF switching lemma, and its performance is analyzed. |
| first_indexed | 2024-04-12T14:57:31Z |
| format | Article |
| id | doaj.art-e725c638c5524658865953402490d6f7 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-04-12T14:57:31Z |
| publishDate | 2022-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-e725c638c5524658865953402490d6f72022-12-22T03:28:11ZengIEEEIEEE Access2169-35362022-01-0110508195083810.1109/ACCESS.2022.31718539766118Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible NoncesMohamud Ahmed Jimale0https://orcid.org/0000-0001-6618-4824Muhammad Reza Z'aba1https://orcid.org/0000-0003-4908-7816Miss Laiha Binti Mat Kiah2https://orcid.org/0000-0002-1240-5406Mohd Yamani Idna Idris3https://orcid.org/0000-0003-4894-0838Norziana Jamil4https://orcid.org/0000-0002-7363-1466Moesfa Soeheila Mohamad5Mohd Saufy Rohmad6Department of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, MalaysiaDepartment of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, MalaysiaDepartment of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, MalaysiaDepartment of Computer System and Technology, Faculty of Computer Science and Information Technology, Universiti Malaya, Kuala Lumpur, MalaysiaCollege of Computing and Informatics, Universiti Tenaga Nasional, Kajang, Selangor, MalaysiaInformation Security Laboratory, MIMOS Berhad, Kuala Lumpur, MalaysiaFaculty of Electrical Engineering, Universiti Teknologi MARA, Shah Alam, Selangor, MalaysiaSince its birth in 2000, authenticated encryption (AE) has been a hot research topic, and many new features have been proposed to boost its security or performance. The Block cipher was the dominant primitive in constructing AE schemes, followed by stream ciphers and compression functions until the sponge construction emerged in 2011. Sponge-based AE schemes provide functional characteristics such as parallelizability, incrementality, and being online. They also offer security features for protection against active or passive adversaries. Currently, there exist parallel sponge-based AE schemes, but they are not protected against simple power analysis (SPA) and differential power analysis (DPA). On the other hand, sponge-based AE schemes that protect against such attacks are serial and cannot be parallelized. Furthermore, sponge-based AE schemes handle the nonces in a way that could allow misuse. So, sponge-based AE schemes that hide the nonce from adversaries are also an open problem. This work aims to bridge these gaps by proposing a parallel sponge-based AE with side-channel protection and adversary-invisible nonces (PSASPIN), using parallel fresh rekeying and the duplex mode of the sponge construction. A leveled implementation is used to implement the key generation part using a pseudorandom function (PRF) based on the Galois field multiplication. The data processing (the rekeyed) part is implemented using the sponge-based duplex mode. Finally, the security proof of the proposed scheme is provided using game-based theory according to the PRP/PRF switching lemma, and its performance is analyzed.https://ieeexplore.ieee.org/document/9766118/Integrityauthenticated encryptionauthenticationconfidentialityCAESAR competitionmessage authentication code |
| spellingShingle | Mohamud Ahmed Jimale Muhammad Reza Z'aba Miss Laiha Binti Mat Kiah Mohd Yamani Idna Idris Norziana Jamil Moesfa Soeheila Mohamad Mohd Saufy Rohmad Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible Nonces IEEE Access Integrity authenticated encryption authentication confidentiality CAESAR competition message authentication code |
| title | Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible Nonces |
| title_full | Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible Nonces |
| title_fullStr | Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible Nonces |
| title_full_unstemmed | Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible Nonces |
| title_short | Parallel Sponge-Based Authenticated Encryption With Side-Channel Protection and Adversary-Invisible Nonces |
| title_sort | parallel sponge based authenticated encryption with side channel protection and adversary invisible nonces |
| topic | Integrity authenticated encryption authentication confidentiality CAESAR competition message authentication code |
| url | https://ieeexplore.ieee.org/document/9766118/ |
| work_keys_str_mv | AT mohamudahmedjimale parallelspongebasedauthenticatedencryptionwithsidechannelprotectionandadversaryinvisiblenonces AT muhammadrezazaba parallelspongebasedauthenticatedencryptionwithsidechannelprotectionandadversaryinvisiblenonces AT misslaihabintimatkiah parallelspongebasedauthenticatedencryptionwithsidechannelprotectionandadversaryinvisiblenonces AT mohdyamaniidnaidris parallelspongebasedauthenticatedencryptionwithsidechannelprotectionandadversaryinvisiblenonces AT norzianajamil parallelspongebasedauthenticatedencryptionwithsidechannelprotectionandadversaryinvisiblenonces AT moesfasoeheilamohamad parallelspongebasedauthenticatedencryptionwithsidechannelprotectionandadversaryinvisiblenonces AT mohdsaufyrohmad parallelspongebasedauthenticatedencryptionwithsidechannelprotectionandadversaryinvisiblenonces |