On Leakage-Resilient Authenticated Encryption with Decryption Leakages
Open accessAbstract
At CCS 2015, Pereira et al. introduced a pragmatic model enabling the study of leakage-resilient symmetric cryptographic primitives based on the minimal use of a leak-free component. This model was recently used to prove the good integrity and confidentiality properties of an authenticated encryption scheme called DTE when the adversary is only given encryption leakages. In this paper, we extend this work by analyzing the case where decryption leakages are also available. We first exhibit attacks exploiting such leakages against the integrity of DTE (and variants) and show how to mitigate them. We then consider message confidentiality in a context where an adversary can observe decryption leakages but not the corresponding messages. The latter is motivated by applications such as secure bootloading and bitstream decryption. We finally formalize the confidentiality requirements that can be achieved in this case and propose a new construction satisfying them, while providing integrity properties with leakage that are as good as those of DTE.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Shops and families often lack security awareness and protection skills, which makes web cameras and monitors vulnerable.
“shops and families often lack security awareness and protection skills, which makes web cameras and monitors (most of the time, the monitor is just a normal personal computer) vulnerable [33,34].”
From Secure Video Surveillance Framework in Smart City (2021) · cites this paper as [34]
Cited by
Sorted by citations
Data Security and Privacy Protection for Cloud Storage: A Survey
Yang, P., Xiong, N. N., & Ren, J. (2020) · IEEE Access · doi:10.1109/access.2020.3009876 · Cited by 545 · see citing works
Statistical Ineffective Fault Attacks on Masked AES with Fault Countermeasures
Dobraunig, C., Eichlseder, M., Groß, H., et al. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-03329-3_11 · Cited by 87 · see citing works
Spook: Sponge-Based Leakage-Resistant Authenticated Encryption with a Masked Tweakable Block Cipher
Bellizia, D., Berti, F., Bronchain, O., et al. (2020) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2020.is1.295-349 · Cited by 57 · see citing works
Self-citationDobraunig, C., Eichlseder, M., Mangard, S., et al. (2020) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2020.is1.390-416 · Cited by 51 · see citing works
Mode-Level vs. Implementation-Level Physical Security in Symmetric Cryptography
Bellizia, D., Bronchain, O., Cassiers, G., et al. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-56784-2_13 · Cited by 40 · see citing works
Self-citationLow AND Depth and Efficient Inverses: a Guide on S-boxes for Low-latency Masking
Bilgin, B., Meyer, L. D., Duval, S., et al. (2020) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2020.i1.144-184 · Cited by 37 · see citing works
Self-citationLeakage Resilience of the Duplex Construction
Dobraunig, C., & Mennink, B. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-34618-8_8 · Cited by 36 · see citing works
Efficient and secure big data storage system with leakage resilience in cloud computing
Zhang, Y., Yang, M., Zheng, D., et al. (2018) · Soft Computing · doi:10.1007/s00500-018-3435-z · Cited by 36 · see citing works
Lightweight Authenticated Encryption Mode Suitable for Threshold Implementation
Naito, Y., Sasaki, Y., & Sugawara, T. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-45724-2_24 · Cited by 33 · see citing works
Secure Video Surveillance Framework in Smart City
Li, H., Xiezhang, T., Yang, C., Deng, L., & Yi, P. (2021) · Sensors · doi:10.3390/s21134419 · Cited by 31 · see citing works
Sponges Resist Leakage: The Case of Authenticated Encryption
Degabriele, J. P., Janson, C., & Struck, P. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-34621-8_8 · Cited by 30 · see citing works
Advances in Cryptology – ASIACRYPT 2020
Mennink, B. J. M., & Moriai, S. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-64837-4 · Cited by 29 · see citing works
TEDT, a Leakage-Resist AEAD Mode for High Physical Security Applications
Berti, F., Guo, C. F., Pereira, O., et al. (2019) · IACR Transactions on Cryptographic Hardware and Embedded Systems · doi:10.46586/tches.v2020.i1.256-320 · Cited by 28 · see citing works
Self-citationTowards Low-Energy Leakage-Resistant Authenticated Encryption from the Duplex Sponge Construction
Guo, C. F., Pereira, O., Peters, T., et al. (2020) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2020.i1.6-42 · Cited by 24 · see citing works
Self-citationBeyond Birthday Bound Secure Fresh Rekeying: Application to Authenticated Encryption
Mennink, B. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-64837-4_21 · Cited by 23 · see citing works
Guo, C. F., Pereira, O., Peters, T., et al. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-30530-7_8 · Cited by 17 · see citing works
Self-citationImproved Leakage-Resistant Authenticated Encryption based on Hardware AES Coprocessors
Bronchain, O., Momin, C., Peters, T., et al. (2021) · IACR Transactions on Cryptographic Hardware and Embedded Systems · doi:10.46586/tches.v2021.i3.641-676 · Cited by 16 · see citing works
Self-citationEfficient Leakage-Resilient MACs Without Idealized Assumptions
Berti, F., Guo, C. F., Peters, T., et al. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-92075-3_4 · Cited by 14 · see citing works
Self-citationCiphertext Integrity with Misuse and Leakage
Berti, F., Koeune, F., Pereira, O., et al. (2018) · doi:10.1145/3196494.3196525 · Cited by 13 · see citing works
Self-citationTriplex: an Efficient and One-Pass Leakage-Resistant Mode of Operation
Shen, Y., Peters, T., Standaert, F., et al. (2022) · IACR Transactions on Cryptographic Hardware and Embedded Systems · doi:10.46586/tches.v2022.i4.135-162 · Cited by 12 · see citing works
Self-citationLeakage-Resilient Authenticated Encryption from Leakage-Resilient Pseudorandom Functions
Krämer, J., & Struck, P. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-68773-1_15 · Cited by 12 · see citing works
Leakage Resilient Value Comparison with Application to Message Authentication
Dobraunig, C., & Mennink, B. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-77886-6_13 · Cited by 12 · see citing works
Tran, S. D. P., Seok, B., & Lee, C. (2020) · Applied Soft Computing · doi:10.1016/j.asoc.2020.106663 · Cited by 10 · see citing works
Analyzing the Leakage Resistance of the NIST’s Lightweight Crypto Competition’s Finalists
Verhamme, C., Cassiers, G., & Standaert, F. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-25319-5_15 · Cited by 9 · see citing works
Self-citationStrong Authenticity with Leakage Under Weak and Falsifiable Physical Assumptions
Berti, F., Guo, C. F., Pereira, O., et al. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-42921-8_31 · Cited by 9 · see citing works
Self-citationTEDT2 – Highly Secure Leakage-Resilient TBC-Based Authenticated Encryption
List, E. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-88238-9_14 · Cited by 8 · see citing works
Reconsidering Generic Composition: The Tag-then-Encrypt Case
Berti, F., Pereira, O., & Peters, T. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-05378-9_4 · Cited by 8 · see citing works
Self-citationLeakage and Tamper Resilient Permutation-Based Cryptography
Dobraunig, C., Mennink, B., & Primas, R. (2022) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3548606.3560635 · Cited by 7 · see citing works
Constructing Committing and Leakage-Resilient Authenticated Encryption
Struck, P., & Weishäupl, M. (2024) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2024.i1.497-528 · Cited by 7 · see citing works
Berti, F., Pereira, O., & Standaert, F. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-23696-0_12 · Cited by 7 · see citing works
Self-citationA Modular Approach to the Incompressibility of Block-Cipher-Based AEADs
Hosoyamada, A., Isobe, T., Todo, Y., et al. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-22966-4_20 · Cited by 6 · see citing works
Efficient Side-Channel Secure Message Authentication with Better Bounds
Guo, C. F., Standaert, F., Wang, W., et al. (2020) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2019.i4.23-53 · Cited by 6 · see citing works
Self-citationLow-Latency Masked Gadgets Robust against Physical Defaults with Application to Ascon
Cassiers, G., Standaert, F., & Verhamme, C. (2024) · IACR Transactions on Cryptographic Hardware and Embedded Systems · doi:10.46586/tches.v2024.i3.603-633 · Cited by 5 · see citing works
Self-citationOn the Security of Off-the-Shelf Microcontrollers: Hardware Is Not Enough
Udvarhelyi, B., van Wassenhove, A., Bronchain, O., et al. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-68487-7_7 · Cited by 5 · see citing works
Self-citationSecurity of the Suffix Keyed Sponge
Dobraunig, C., & Mennink, B. (2020) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2019.i4.223-248 · Cited by 5 · see citing works
Generalized Feistel Ciphers for Efficient Prime Field Masking
Grassi, L., Masure, L., Méaux, P., et al. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-58734-4_7 · Cited by 4 · see citing works
Self-citationSecure Message Authentication in the Presence of Leakage and Faults
Berti, F., Guo, C., Peters, T., et al. (2023) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2023.i1.288-315 · Cited by 3 · see citing works
Self-citationMultiplex: TBC-Based Authenticated Encryption with Sponge-Like Rate
Shen, Y., Peters, T., & Standaert, F. (2024) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2024.i2.1-34 · Cited by 3 · see citing works
Self-citationNon-malleable Codes from Authenticated Encryption in Split-State Model
Ghosal, A. K., & RoyChowdhury, D. (2023) · Communications in computer and information science · doi:10.1007/978-981-99-2264-2_2 · Cited by 1 · see citing works
On the Security of Triplex- and Multiplex-Type Constructions with Smaller Tweaks
Datta, N., Dutta, A., List, E., et al. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-56232-7_2 · Cited by 1 · see citing works
Cryptanalysis Results on Spook
Derbez, P., Huynh, P., Lallemand, V., et al. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-56877-1_13
Tightening Leakage Resilience of the Suffix Keyed Sponge
Berendsen, H., & Mennink, B. (2024) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2024.i1.459-496
Mode‐Level Side‐Channel Countermeasures
Pereira, O., PETERS, T., & Standaert, F. (2025) · doi:10.1002/9781394351879.ch8
Self-citationNutri Scan AI System Using Image Processing and Neural Networks
Nagaraju, M., Bhavani, K., Aravind, T., et al. (2025) · International Conference for Emerging Technology (INCET) · doi:10.1109/incet64471.2025.11140894
- Authors
- Berti, F., Pereira, O., Peters, T., & Standaert, F.-X.
- Affiliations
- UCLouvain (BE)
- Venue
- IACR Transactions on Symmetric Cryptology
- Published
- 2017-09-19
- Pages
- 271-293
- ISSN
- 2519-173X (ISSN-L)
- OpenAlex
- W4237037674
- Cited by
- 53
- References
- 0
- Citations by year
- 2026: 2 · 2025: 4 · 2024: 7 · 2023: 4 · 2022: 3 · 2021: 7 · 2020: 17 · 2019: 5 · 2018: 4
- FWCI
- 4.24
- Type
- journal article
- Language
- en
- Open access
- diamond
- doi.org
- Locations
- IACR Transactions on Symmetric Cryptology (publishedVersion, cc-by)
- DIAL (Catholic University of Leuven) (submittedVersion)
- Digital Access to Libraries (submittedVersion, other-oa)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- University Library BOCHUM (Ruhr University Bochum) (cc-by)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
- Physical Sciences › Computer Science › Artificial Intelligence › Coding theory and cryptography
- Keywords
- leakage-resilient cryptography, authenticated encryption, integrity attacks, message confidentiality
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
