Structured Leakage and Applications to Cryptographic Constant-Time and Cost - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2021

Structured Leakage and Applications to Cryptographic Constant-Time and Cost

Abstract

Many security properties of interest are captured by instrumented semantics that model the functional behavior and the leakage of programs. For several important properties, including cryptographic constant-time (CCT), leakage models are sufficiently abstract that one can define instrumented semantics for high-level and low-level programs. One important goal is then to relate leakage of source programs and leakage of their compilation---this can be used, e.g., to prove preservation of CCT. To simplify this task, we put forward the idea of structured leakage. In contrast to the usual modeling of leakage as a sequence of observations, structured leakage is tightly coupled with the operational semantics of programs. This coupling greatly simplifies the definition of leakage transformers that map the leakage of source programs to leakage of their compilation and yields more precise statements about the preservation of security properties. We illustrate our methods on the Jasmin compiler and prove preservation results for two policies of interest: CCT and cost.
No file

Dates and versions

hal-03430789 , version 1 (16-11-2021)

Identifiers

Cite

Gilles Barthe, Benjamin Grégoire, Vincent Laporte, Swarn Priya. Structured Leakage and Applications to Cryptographic Constant-Time and Cost. CCS 2021 - ACM SIGSAC Conference on Computer and Communications Security, Nov 2021, Virtual Event, South Korea. pp.462-476, ⟨10.1145/3460120.3484761⟩. ⟨hal-03430789⟩
92 View
0 Download

Altmetric

Share

Gmail Facebook X LinkedIn More