Lattice-Based Weak Curve Fault Attack on ECDSA - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Lattice-Based Weak Curve Fault Attack on ECDSA

Weiqiong Cao
  • Fonction : Auteur
  • PersonId : 1154397
Hongsong Shi
  • Fonction : Auteur
  • PersonId : 1154398
Hua Chen
  • Fonction : Auteur
Wei Wei
  • Fonction : Auteur
Jiazhe Chen
  • Fonction : Auteur

Résumé

ECDSA algorithm is usually used in ICT system to ensure the authenticity of communication. But the weaknesses in various implementations of ECDSA may make its security deviate from theoretical guarantee. This paper proposes a new lattice-based weak curve fault attack on ECDSA. Since the ECDLP is not required to be computationally practical on the whole group of $$\langle G \rangle $$⟨G⟩ (G is the specified base point of ECDSA), our approach extends the existing attacks along this line. In detail, the proposed attack assumes a segment of consecutive bits of the curve parameter a in the Weierstrass equation of ECDSA can be disturbed randomly by fault injection and thus is changed into $$a'$$a′. An analysis about the density of smooth numbers demonstrates the faulty parameter $$a'$$a′ can be used for our attack with high probability. Then we show $$a'$$a′ can be recovered by a dedicated quadratic residue distinguisher. Some reduced information about the nonce used in ECDSA signature generation can be obtained by solving the instances of ECDLP on the new curve about $$a'$$a′. With the help of these information, we can construct a new model of lattice to recover the private key with the lattice basis reduction techniques. Further, we show the same strategy can defeat the nonce masking countermeasure if the random mask is not too long, and makes the commonly employed countermeasures ineffective. To our knowledge, the problem remains untraceable to the existing weak curve fault attacks. Thus the proposed approach can find more applications than the existing ones. This is demonstrated by the experimental analysis.
Fichier principal
Vignette du fichier
512098_1_En_10_Chapter.pdf (621.83 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03746039 , version 1 (04-08-2022)

Licence

Paternité

Identifiants

Citer

Weiqiong Cao, Hongsong Shi, Hua Chen, Wei Wei, Jiazhe Chen. Lattice-Based Weak Curve Fault Attack on ECDSA. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.146-161, ⟨10.1007/978-3-030-78120-0_10⟩. ⟨hal-03746039⟩
29 Consultations
42 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More