- author = "Madura A. Shelton and Niels Samwel and Lejla Batina and Francesco Regazzoni and Markus Wagner and Yuval Yarom",
- title = "Rosita: Towards Automatic Elimination of Power-Analysis Leakage in Ciphers",
- booktitle = "Network and Distributed System Security Symposium, NDSS 2021",
- year = "2021",
- editor = "Ahmad-Reza Sadeghi and Farinaz Koushanfar",
- address = "virtual",
- month = "21-25 " # feb,
- keywords = "genetic algorithms, genetic programming, genetic improvement, SBSE, TVLA, ISO 17825, ELMO, STM32F030, ARM Cortex-M0, AES",
- ISBN = "1-891562-66-5",
-
URL = "
https://arxiv.org/abs/1912.05183",
-
URL = "
https://www.ndss-symposium.org/wp-content/uploads/ndss2021_4B-3_23137_paper.pdf",
-
video_url = "https://www.youtube.com/watch?v=yY-YQItFug8",
-
DOI = "
10.14722/ndss.2021.23137",
- size = "17 pages",
- abstract = "Since their introduction over two decades ago, side-channel attacks have presented a serious security threat. While many ciphers implementations employ masking techniques to protect against such attacks, they often leak secret information due to unintended interactions in the hardware. We present ROSITA, a code rewrite engine that uses a leakage emulator which we amend to correctly emulate the micro-architecture of a target system. We use ROSITA to automatically protect masked implementations of AES, ChaCha, and Xoodoo. For AES and Xoodoo, we show the absence of observable leakage at 1000000 traces with less than 21 percent penalty to the performance. For ChaCha, which has significantly more leakage, ROSITA eliminates over 99 percent of the leakage, at a performance cost of 64 percent",
-
notes = "Perhaps not GP? patches are hand-designed solutions
applied iteratively.
'battery to power the evaluation board'
'We find several sources of leakage that ELMO does not identify.'
'ROSITA is a rewrite engine that takes the code and the output of (our) ELMO*, and rewrites the code to avoid leakage.'",
