Loop-Abort Faults on Supersingular Isogeny Cryptosystems

Alexandre Gélin (1) , Benjamin Wesolowski (2)

1 ALMASTY - ALgorithms for coMmunicAtion SecuriTY
2 EPFL - Ecole Polytechnique Fédérale de Lausanne

Cryptographic schemes based on supersingular isogenies have become an active area of research in the field of post-quantum cryptography. We investigate the resistance of these cryptosystems to fault injection attacks. It appears that the iterative structure of the secret isogeny computation renders these schemes vulnerable to loop-abort attacks. Loop-abort faults allow to perform a full key recovery, bypassing all the previously introduced validation methods. Therefore implementing additional countermeasures seems unavoidable for applications where physical attacks are relevant.

Mots clés: Supersingular isogeny cryptosystem; Fault injection; Real-world attacks; Post-quantum cryptography

Domaines: Cryptographie et sécurité [cs.CR]

Alexandre Gélin, Benjamin Wesolowski. Loop-Abort Faults on Supersingular Isogeny Cryptosystems. 8th International Conference on Post-Quantum Cryptography (PQCrypto 2017), Jun 2017, Utrecht, Netherlands. pp.93-106, ⟨10.1007/978-3-319-59879-6_6⟩. ⟨hal-01568331⟩