{"id":"https://openalex.org/W4402807571","doi":"https://doi.org/10.46586/tches.v2024.i4.355-381","title":"pyecsca: Reverse engineering black-box elliptic curve cryptography via side-channel analysis","display_name":"pyecsca: Reverse engineering black-box elliptic curve cryptography via side-channel analysis","publication_year":2024,"publication_date":"2024-09-05","ids":{"openalex":"https://openalex.org/W4402807571","doi":"https://doi.org/10.46586/tches.v2024.i4.355-381"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2024.i4.355-381","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2024.i4.355-381","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/11796/11301","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/11796/11301","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013087653","display_name":"Jan Jancar","orcid":"https://orcid.org/0000-0002-1864-0183"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Jan Jancar","raw_affiliation_strings":["Masaryk University, Brno, Czechia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University, Brno, Czechia","institution_ids":["https://openalex.org/I21449261"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062498890","display_name":"Vojt\u011bch Such\u00e1nek","orcid":"https://orcid.org/0000-0003-0668-221X"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Vojtech Suchanek","raw_affiliation_strings":["Masaryk University, Brno, Czechia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University, Brno, Czechia","institution_ids":["https://openalex.org/I21449261"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069701908","display_name":"Petr \u0160venda","orcid":"https://orcid.org/0000-0002-9784-7624"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Petr Svenda","raw_affiliation_strings":["Masaryk University, Brno, Czechia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University, Brno, Czechia","institution_ids":["https://openalex.org/I21449261"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030635175","display_name":"Vladim\u00edr Sedl\u00e1\u010dek","orcid":"https://orcid.org/0000-0003-2409-661X"},"institutions":[{"id":"https://openalex.org/I102322142","display_name":"Rutgers, The State University of New Jersey","ror":"https://ror.org/05vt9qd57","country_code":"US","type":"education","lineage":["https://openalex.org/I102322142"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vladimir Sedlacek","raw_affiliation_strings":["Rutgers University, Piscataway, New Jersey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rutgers University, Piscataway, New Jersey","institution_ids":["https://openalex.org/I102322142"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025785735","display_name":"\u0141ukasz Chmielewski","orcid":"https://orcid.org/0000-0001-8978-5235"},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"\u0141ukasz Chmielewski","raw_affiliation_strings":["Masaryk University, Brno, Czechia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Masaryk University, Brno, Czechia","institution_ids":["https://openalex.org/I21449261"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.337,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.86798534,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"2024","issue":"4","first_page":"355","last_page":"381"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.6962829232215881},{"id":"https://openalex.org/keywords/elliptic-curve-cryptography","display_name":"Elliptic curve cryptography","score":0.6790550351142883},{"id":"https://openalex.org/keywords/elliptic-curve","display_name":"Elliptic curve","score":0.6020691394805908},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5931824445724487},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.5672997236251831},{"id":"https://openalex.org/keywords/s-box","display_name":"S-box","score":0.5399686098098755},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.5133849382400513},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.46801602840423584},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.33083486557006836},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3110275864601135},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.24571406841278076},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.23788058757781982},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1520470678806305},{"id":"https://openalex.org/keywords/mathematical-analysis","display_name":"Mathematical analysis","score":0.14545902609825134},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.07646921277046204},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.07150441408157349}],"concepts":[{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.6962829232215881},{"id":"https://openalex.org/C167615521","wikidata":"https://www.wikidata.org/wiki/Q1048911","display_name":"Elliptic curve cryptography","level":4,"score":0.6790550351142883},{"id":"https://openalex.org/C179603306","wikidata":"https://www.wikidata.org/wiki/Q268493","display_name":"Elliptic curve","level":2,"score":0.6020691394805908},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5931824445724487},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.5672997236251831},{"id":"https://openalex.org/C45737032","wikidata":"https://www.wikidata.org/wiki/Q748364","display_name":"S-box","level":4,"score":0.5399686098098755},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.5133849382400513},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46801602840423584},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.33083486557006836},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3110275864601135},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.24571406841278076},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.23788058757781982},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1520470678806305},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.14545902609825134},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.07646921277046204},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.07150441408157349}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2024.i4.355-381","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2024.i4.355-381","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/11796/11301","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:50af233f9fff4e3d8e7f6c7fb97be525","is_oa":false,"landing_page_url":"https://doaj.org/article/50af233f9fff4e3d8e7f6c7fb97be525","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2024, Iss 4 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2024.i4.355-381","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2024.i4.355-381","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/11796/11301","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1139319464","display_name":"SaTC: CORE: Small: Lattices, number theory, and distribution questions in cryptography","funder_award_id":"2124692","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4402807571.pdf","grobid_xml":"https://content.openalex.org/works/W4402807571.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4206598047","https://openalex.org/W2102786134","https://openalex.org/W1987282452","https://openalex.org/W2011644400","https://openalex.org/W2952236061","https://openalex.org/W1984273188","https://openalex.org/W3105637246","https://openalex.org/W4255075415","https://openalex.org/W3207190435","https://openalex.org/W4397049040"],"abstract_inverted_index":{"Side-channel":[0],"attacks":[1,126,200],"on":[2,228,238],"elliptic":[3],"curve":[4,52,276],"cryptography":[5],"(ECC)":[6],"often":[7,84],"assume":[8],"a":[9,39,44,73,80,170,185,267],"white-box":[10],"attacker":[11,82],"who":[12],"has":[13,86,94],"detailed":[14],"knowledge":[15,102],"of":[16,32,103,117,162,172,179,194,203,236],"the":[17,22,27,51,59,67,76,90,98,110,131,160,207,214,220,234,248,259],"implementation":[18,105,155,215],"choices":[19,37,106],"taken":[20],"by":[21,125,145],"target":[23,91,268],"implementation.":[24,48,269],"Due":[25],"to":[26,42,89,97,120,134,205,212,245],"complex":[28],"and":[29,46,58,79,183,187,222,232,253,262,275],"layered":[30],"nature":[31],"ECC,":[33],"there":[34],"are":[35,243],"many":[36],"that":[38,83],"developer":[40],"makes":[41],"obtain":[43],"functional":[45],"interoperable":[47],"These":[49],"include":[50],"model,":[53],"coordinate":[54,260,274],"system,":[55],"addition":[56,263],"formulas,":[57],"scalar":[60,249],"multiplier,":[61],"or":[62,136],"lower-level":[63],"details":[64],"such":[65,127],"as":[66,123,128],"finite-field":[68],"multiplication":[69,250],"algorithm.":[70],"This":[71],"creates":[72],"gap":[74,111,144],"between":[75],"attack":[77],"requirements":[78],"real-world":[81,115],"only":[85],"black-box":[87,180],"access":[88,96],"\u2013":[92],"i.e.,":[93],"no":[95],"source":[99],"code":[100],"nor":[101],"specific":[104],"made.":[107],"Yet,":[108],"when":[109],"is":[112],"closed,":[113],"even":[114],"implementations":[116,165,182],"ECC":[118,149,164,181,195],"succumb":[119],"side-channel":[121,192],"attacks,":[122],"evidenced":[124],"TPM-Fail,":[129],"Minerva,":[130],"Side":[132],"Journey":[133],"Titan,":[135],"TPMScan":[137],"[MSE+20;":[138],"JSS+20;":[139],"RLM+21;":[140],"SDB+24].We":[141],"study":[142,233],"this":[143],"first":[146],"analyzing":[147],"open-source":[148,189],"libraries":[150],"for":[151,175,191],"insight":[152],"into":[153],"realworld":[154],"choices.":[156],"We":[157,225],"then":[158],"examine":[159],"space":[161],"all":[163],"combinatorially.":[166],"Finally,":[167],"we":[168],"present":[169],"set":[171],"novel":[173],"methods":[174,198,242],"automated":[176],"reverse":[177],"engineering":[178],"release":[184],"documented":[186],"usable":[188],"toolkit":[190],"analysis":[193],"called":[196],"pyecsca.Our":[197],"turn":[199],"around:":[201],"instead":[202],"attempting":[204],"recover":[206,213],"private":[208,221],"key,":[209],"they":[210,271],"attempt":[211],"configuration":[216],"given":[217],"control":[218],"over":[219],"public":[223],"inputs.":[224],"evaluate":[226],"them":[227],"two":[229],"simulation":[230],"levels":[231],"effect":[235],"noise":[237],"their":[239],"performance.":[240],"Our":[241],"able":[244],"1)":[246],"reverse-engineer":[247],"algorithm":[251],"completely":[252],"2)":[254],"infer":[255],"significant":[256],"information":[257],"about":[258],"system":[261],"formulas":[264],"used":[265],"in":[266],"Furthermore,":[270],"can":[272],"bypass":[273],"randomization":[277],"countermeasures.":[278]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}