{"id":"https://openalex.org/W3183077458","doi":"https://doi.org/10.46586/tches.v2021.i3.202-234","title":"Breaking Masked Implementations with Many Shares on 32-bit Software Platforms","display_name":"Breaking Masked Implementations with Many Shares on 32-bit Software Platforms","publication_year":2021,"publication_date":"2021-07-09","ids":{"openalex":"https://openalex.org/W3183077458","doi":"https://doi.org/10.46586/tches.v2021.i3.202-234","mag":"3183077458"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2021.i3.202-234","doi":"https://doi.org/10.46586/tches.v2021.i3.202-234","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i3.202-234","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8973/8551","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","jufo-1","poland-40","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/I4405276624","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/I4405276624"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/8973/8551","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046595634","display_name":"Olivier Bronchain","orcid":"https://orcid.org/0000-0001-7595-718X","observed_orcids":["https://orcid.org/0000-0001-7595-718X"]},"institutions":[{"id":"https://openalex.org/I95674353","display_name":"UCLouvain","ror":"https://ror.org/02495e989","country_code":"BE","type":"education","lineage":["https://openalex.org/I95674353"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Olivier Bronchain","raw_affiliation_strings":["Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium","institution_ids":["https://openalex.org/I95674353"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070542865","display_name":"Fran\u00e7ois\u2010Xavier Standaert","orcid":"https://orcid.org/0000-0001-7444-0285","observed_orcids":["https://orcid.org/0000-0001-7444-0285"]},"institutions":[{"id":"https://openalex.org/I95674353","display_name":"UCLouvain","ror":"https://ror.org/02495e989","country_code":"BE","type":"education","lineage":["https://openalex.org/I95674353"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Fran\u00e7ois-Xavier Standaert","raw_affiliation_strings":["Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Crypto Group, ICTEAM Institute, UCLouvain, Louvain-la-Neuve, Belgium","institution_ids":["https://openalex.org/I95674353"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I95674353"],"apc_list":null,"apc_paid":null,"fwci":1.5167,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.83648837,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"202","last_page":"234"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.0,"subfield":{"id":"https://openalex.org/subfields/2607","display_name":"Discrete Mathematics and Combinatorics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/higher-order-masking","display_name":"higher-order masking","score":0.7390000224113464},{"id":"https://openalex.org/keywords/masked-aes","display_name":"masked AES","score":0.6079999804496765},{"id":"https://openalex.org/keywords/side-channel-attacks","display_name":"side-channel attacks","score":0.6520000100135803},{"id":"https://openalex.org/keywords/arm-cortex-m0","display_name":"ARM Cortex-M0","score":0.7260000109672546},{"id":"https://openalex.org/keywords/arm-cortex-m3","display_name":"ARM Cortex-M3","score":0.9769999980926514},{"id":"https://openalex.org/keywords/key-recovery","display_name":"key recovery","score":0.7390000224113464},{"id":"https://openalex.org/keywords/lightweight-cryptography","display_name":"lightweight cryptography","score":0.5519999861717224},{"id":"https://openalex.org/keywords/countermeasures","display_name":"countermeasures","score":0.652999997138977}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7082953453063965},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5866423845291138},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.5794529318809509},{"id":"https://openalex.org/C71743495","wikidata":"https://www.wikidata.org/wiki/Q2845210","display_name":"Power analysis","level":3,"score":0.5585527420043945},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5453634858131409},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.4728941023349762},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.4600287675857544},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4547119140625},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.4251844584941864},{"id":"https://openalex.org/C156340839","wikidata":"https://www.wikidata.org/wiki/Q2704791","display_name":"Enumeration","level":2,"score":0.4124095141887665},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.33093327283859253},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.327783465385437},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.21427908539772034},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13409653306007385},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.46586/tches.v2021.i3.202-234","doi":"https://doi.org/10.46586/tches.v2021.i3.202-234","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i3.202-234","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8973/8551","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","jufo-1","poland-40","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/I4405276624","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/I4405276624"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:dial.uclouvain.be:boreal:256816","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/2078.1/256816","pdf_url":null,"source":{"id":"https://openalex.org/S4306400166","display_name":"Digital Access to Libraries","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2800384882","host_organization_name":"Harris County Public Library","host_organization_lineage":["https://openalex.org/I2800384882"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems, Vol. 2021, no.3, p. 202-234 (2021)","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:e234a16292d34512851ffd1e8b577c62","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/e234a16292d34512851ffd1e8b577c62","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2021, Iss 3 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2021.i3.202-234","doi":"https://doi.org/10.46586/tches.v2021.i3.202-234","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i3.202-234","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8973/8551","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","jufo-1","poland-40","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/I4405276624","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/I4405276624"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G4374936913","display_name":"Security Without Obscurity for Reliable Devices","funder_award_id":"724725","funder_id":"https://openalex.org/F4320338335","funder_display_name":"H2020 European Research Council"}],"funders":[{"id":"https://openalex.org/F4320321390","display_name":"Fonds De La Recherche Scientifique - FNRS","ror":"https://ror.org/03q83t159"},{"id":"https://openalex.org/F4320338335","display_name":"H2020 European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3183077458.pdf","grobid_xml":"https://content.openalex.org/works/W3183077458.grobid-xml"},"referenced_works_count":51,"referenced_works":["https://openalex.org/W108606907","https://openalex.org/W130128522","https://openalex.org/W191000419","https://openalex.org/W765694869","https://openalex.org/W802019357","https://openalex.org/W1472434837","https://openalex.org/W1541098965","https://openalex.org/W1541150254","https://openalex.org/W1575446397","https://openalex.org/W1592625985","https://openalex.org/W1595155753","https://openalex.org/W1599906532","https://openalex.org/W1736874106","https://openalex.org/W1752847028","https://openalex.org/W1774054610","https://openalex.org/W1796231437","https://openalex.org/W1897761346","https://openalex.org/W1943109301","https://openalex.org/W2005193355","https://openalex.org/W2099724084","https://openalex.org/W2114286085","https://openalex.org/W2125025555","https://openalex.org/W2140823840","https://openalex.org/W2144630005","https://openalex.org/W2290839136","https://openalex.org/W2398251914","https://openalex.org/W2477136977","https://openalex.org/W2479727864","https://openalex.org/W2487967864","https://openalex.org/W2495498226","https://openalex.org/W2570230384","https://openalex.org/W2576420291","https://openalex.org/W2592002982","https://openalex.org/W2613550625","https://openalex.org/W2741776607","https://openalex.org/W2795224205","https://openalex.org/W2809909270","https://openalex.org/W2810304817","https://openalex.org/W2889487406","https://openalex.org/W2921639663","https://openalex.org/W2967098993","https://openalex.org/W3013797610","https://openalex.org/W3022378354","https://openalex.org/W3038933981","https://openalex.org/W3044017192","https://openalex.org/W3081832642","https://openalex.org/W3107729397","https://openalex.org/W4231098049","https://openalex.org/W4232126954","https://openalex.org/W4238796697","https://openalex.org/W4239644085"],"related_works":["https://openalex.org/W4220799736","https://openalex.org/W7126163270","https://openalex.org/W2574539584","https://openalex.org/W6987072593","https://openalex.org/W7098985963","https://openalex.org/W4323031984","https://openalex.org/W3013797610","https://openalex.org/W1584807987","https://openalex.org/W2592002982","https://openalex.org/W2808504905"],"abstract_inverted_index":{"We":[0,154,191,206,225],"explore":[1],"the":[2,14,17,20,44,76,131,142,157,182,187,212,228,231,236,242],"concrete":[3],"side-channel":[4,171],"security":[5,38,55,107,216],"provided":[6],"by":[7,51,221],"state-of-theart":[8],"higher-order":[9],"masked":[10,126,179],"software":[11],"implementations":[12,50],"of":[13,102,160,167,186,214,230,238],"AES":[15,127],"and":[16,29,57,68,173],"(candidate":[18],"to":[19,65,88,104],"NIST":[21],"Lightweight":[22],"Cryptography":[23],"competition)":[24],"Clyde,":[25],"in":[26,43,118,235],"ARM":[27],"Cortex-M0":[28,77,132],"M3":[30],"devices.":[31],"Rather":[32],"than":[33,120],"looking":[34],"for":[35,123,170],"possibly":[36],"reduced":[37],"orders":[39],"(as":[40],"frequently":[41],"considered":[42],"literature),":[45],"we":[46,110],"directly":[47],"target":[48],"these":[49,193],"assuming":[52],"their":[53,61],"maximum":[54],"order":[56],"aim":[58],"at":[59,248],"reducing":[60],"noise":[62,83],"level":[63],"thanks":[64],"multivariate,":[66],"horizontal":[67],"analytical":[69],"attacks.":[70],"Our":[71],"investigations":[72],"point":[73],"out":[74],"that":[75,84],"device":[78],"has":[79],"so":[80],"limited":[81,165],"physical":[82],"masking":[85],"is":[86],"close":[87],"ineffective.":[89],"The":[90],"Cortex-M3":[91,143],"shows":[92],"a":[93,99,113,124,178,196],"better":[94],"trend":[95],"but":[96],"still":[97],"requires":[98],"large":[100],"number":[101,166],"shares":[103,146],"provide":[105],"strong":[106],"guarantees.":[108],"Practically,":[109],"first":[111],"exhibit":[112],"full":[114],"128-bit":[115],"key":[116],"recovery":[117],"less":[119],"10":[121],"traces":[122],"6-share":[125],"implementation":[128],"running":[129],"on":[130],"requiring":[133],"232":[134],"enumeration":[135,152],"power.":[136,153],"A":[137],"similar":[138],"attack":[139,233],"performed":[140],"against":[141,177],"with":[144,150,164,181,195],"5":[145],"require":[147],"1,000":[148],"measurements":[149],"244":[151],"then":[155],"show":[156],"positive":[158],"impact":[159],"lightweight":[161],"block":[162],"ciphers":[163],"AND":[168],"gates":[169],"security,":[172],"compare":[174],"our":[175,204,209],"attacks":[176,185],"Clyde":[180],"best":[183],"reported":[184],"CHES":[188,249],"2020":[189],"CTF.":[190],"complement":[192],"experiments":[194],"careful":[197],"information":[198],"theoretic":[199],"analysis,":[200],"which":[201],"allows":[202],"interpreting":[203],"results.":[205],"also":[207],"discuss":[208],"conclusions":[210],"under":[211],"umbrella":[213],"\u201cbackwards":[215],"evaluations\u201d":[217],"recently":[218],"put":[219],"forwards":[220],"Azouaoui":[222],"et":[223],"al.":[224],"finally":[226],"extrapolate":[227],"evolution":[229],"proposed":[232,247],"complexities":[234],"presence":[237],"additional":[239],"countermeasures":[240],"using":[241],"local":[243],"random":[244],"probing":[245],"model":[246],"2020.":[250]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-07-19T00:00:00"}