arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2201.11670cs.ITcs.CRmath.IT
收藏

侧信道攻击下信源加密的强逆定理

Strong Converse Theorem for Source Encryption under Side-Channel Attacks

Yasutada Oohama, Bagus Santoso

摘要:

我们感兴趣的是研究在侧信道攻击下使用对称密钥的源加密的安全性。本文提出了一种基于对称密钥的信源加密的一般框架,该框架适用于基于对称密钥的\emph{any}信源加密和针对秘密密钥的\emph{any}类侧信道攻击。我们还提出了一个新的安全标准下的强保密侧信道攻击,这是一个自然的扩展互信息,即,\emph{the maximum conditional mutual information between the plaintext and the ciphertext given the adversarial key leakage, where the maximum is taken over all possible plaintext distribution}。在这个新的标准下,我们成功地制定了速率区域,这是必要和充分条件,即使在侧信道攻击有安全的传输。此外,我们还证明了另一个理论结果,我们的新的安全标准,这可能是有趣的,在其本身的权利:在离散的无记忆源的情况下,没有完美的秘密下的侧信道攻击的标准安全标准,即,普通的互信息在这个新的安全标准中是可实现的,而不需要实现完全保密,尽管我们的新的安全标准比标准安全标准更严格。

英文摘要:

We are interested in investigating the security of source encryption with a symmetric key under side-channel attacks. In this paper, we propose a general framework of source encryption with a symmetric key under the side-channel attacks, which applies to \emph{any} source encryption with a symmetric key and \emph{any} kind of side-channel attacks targeting the secret key. We also propose a new security criterion for strong secrecy under side-channel attacks, which is a natural extension of mutual information, i.e., \emph{the maximum conditional mutual information between the plaintext and the ciphertext given the adversarial key leakage, where the maximum is taken over all possible plaintext distribution}. Under this new criterion, we successfully formulate the rate region, which serves as both necessary and sufficient conditions to have secure transmission even under side-channel attacks. Furthermore, we also prove another theoretical result on our new security criterion, which might be interesting in its own right: in the case of the discrete memoryless source, no perfect secrecy under side-channel attacks in the standard security criterion, i.e., the ordinary mutual information, is achievable without achieving perfect secrecy in this new security criterion, although our new security criterion is more strict than the standard security criterion.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑