Yoroi: Updatable Whitebox Cryptography

نویسندگان

چکیده

Whitebox cryptography aims to provide security in the whitebox setting where adversary has unlimited access implementation and its environment. In order ensure setting, it should prevent key extraction attacks code-lifting attacks, which steals original cryptographic instead of key, utilizes as a big key. Although recent published ciphers such SPACE, SPNbox, Whiteblock successfully achieve against they only mitigation codelifting attack by so-called space hardness incompressibility properties underlying tables space-hard/incompressible table might be eventually stolen continuous leakage. The complete prevention may need periodically update secret However, that entails high costs introduce an additional vulnerability into system due necessity for reencryption all data updated this paper, we new property, denominated longevity, cryptography. This property enhances with leakage updating incompressible We propose family whitebox-secure block Yoroi longevity addition hardness. By periodically, provides constant without updating. Moreover, performance is competitive existing implementations blackbox context.

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Automated Whitebox Fuzz Testing

Fuzz testing is an effective technique for finding security vulnerabilities in software. Traditionally, fuzz testing tools apply random mutations to well-formed inputs and test the program on the resulting values. We present an alternative whitebox fuzz testing approach inspired by recent advances in symbolic execution and dynamic test generation. Our approach records an actual run of a program...

متن کامل

jFuzz: A Concolic Whitebox Fuzzer for Java

We present jFuzz, a automatic testing tool for Java programs. jFuzz is a concolic whitebox fuzzer, built on the NASA Java PathFinder, an explicit-state Java model checker, and a framework for developing reliability and analysis tools for Java. Starting from a seed input, jFuzz automatically and systematically generates inputs that exercise new program paths. jFuzz uses a combination of concrete...

متن کامل

Updatable Functional Encryption

Functional encryption (FE) allows an authority to issue tokens associated with various functions, allowing the holder of some token for function f to learn only f(D) from a ciphertext that encrypts D. The standard approach is to model f as a circuit, which yields inefficient evaluations over large inputs. Here, we propose a new primitive that we call updatable functional encryption (UFE), where...

متن کامل

Updatable Strategy Logic

In this article, we present Updatable Strategy Logic (USL), a multi-agent temporal logic which subsumes the main propositions in this area, such as ATL-ATL*, ATLsc and SL. These logics allow to express the capabilities of agents to ensure the satisfaction of temporal properties. USL mainly di ers from SL in two ways. Semantically, the notion of strategy composition is extended to enable an agen...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

ژورنال

عنوان ژورنال: IACR transactions on cryptographic hardware and embedded systems

سال: 2021

ISSN: ['2569-2925']

DOI: https://doi.org/10.46586/tches.v2021.i4.587-617