Conditional Re‐encoding Method for Cryptanalysis‐Resistant White‐Box AES. Issue 5 (1st October 2015)

• Record Type: Journal Article
• Authors: Lee, Seungkwang; Choi, Dooho; Choi, Yong‐Je
• Is Part Of: ETRI journal. Volume 37:Issue 5(2015)
• Page Start: 1012
• Page End: 1022
• Publication Date: 2015-10-01
• Subjects: White‐box cryptography -- cryptanalysis -- countermeasure -- AES; Telecommunication -- Periodicals; Electronics -- Periodicals; Electronics; Telecommunication; Periodicals; Periodicals; 621.38205
• DOI: 10.4218/etrij.15.0114.0025
• Languages: English
• ISSNs: 1225-6463

Abstract

Abstract : Conventional cryptographic algorithms are not sufficient to protect secret keys and data in white‐box environments, where an attacker has full visibility and control over an executing software code. For this reason, cryptographic algorithms have been redesigned to be resistant to white‐box attacks. The first white‐box AES (WB‐AES) implementation was thought to provide reliable security in that all brute force attacks are infeasible even in white‐box environments; however, this proved not to be the case. In particular, Billet and others presented a cryptanalysis of WB‐AES with 230 time complexity, and Michiels and others generalized it for all substitution‐linear transformation ciphers. Recently, a collision‐based cryptanalysis was also reported. In this paper, we revisit Chow and others' first WB‐AES implementation and present a conditional re‐encoding method for cryptanalysis protection. The experimental results show that there is approximately a 57% increase in the memory requirement and a 20% increase in execution speed.