As a guest user you are not logged in or recognized by your IP address. You have
access to the Front Matter, Abstracts, Author Index, Subject Index and the full
text of Open Access publications.
Let f(x) be a certain cryptographic function and let g, g: Im(f) → {true, false}, be an integrity test saying whether a particular value of f(x) fits into predefined integrity boundaries or not. The “Test and Repeat” paradigm is then characterized by the following pseudocode: repeat let y = f(x) until g(y) = true. On a first look, it may seem like a kind of best programming practice that can only improve overall security of the module. Especially, an architect can see it as a rather strong countermeasure against attacks based on computational faults – so called fault attacks. In this article, however, we will show that such a practice can induce particular cryptographic weaknesses. Therefore, it cannot be regarded as a general security improvement. Especially, it can even increase a vulnerability to the fault attacks. Its usage in cryptographic modules shall, therefore, undergo a proper cryptanalysis before being actually deployed.
This website uses cookies
We use cookies to provide you with the best possible experience. They also allow us to analyze user behavior in order to constantly improve the website for you. Info about the privacy policy of IOS Press.
This website uses cookies
We use cookies to provide you with the best possible experience. They also allow us to analyze user behavior in order to constantly improve the website for you. Info about the privacy policy of IOS Press.