Paper 2025/2165 Original: eprint.iacr.org/2025/2165 ↗

Extending and Accelerating Inner Product Masking with Fault Detection via Instruction Set Extension

Songqiao Cui
Geng Luo
Junhan Bao
Josep Balasch
Ingrid Verbauwhede
Abstract

Inner product masking is a well-studied masking countermeasure against side-channel attacks. IPM-FD further extends the IPM scheme with fault detection capabilities. However, implementing IPM-FD in software especially on embedded devices results in high computational overhead. Therefore, in this work we perform a detailed analysis of all building blocks for IPM-FD scheme and propose a Masked Processing Unit to accelerate all operations, for example multiplication and IPM-FD specific Homogenization. We can then offload these computational extensive operations with dedicated hardware support. With only $4.05\%$ and $4.01\%$ increase in Look-Up Tables and Flip-Flops (Random Number Generator excluded), respectively, compared with baseline CV32E40p RISC-V core, we can achieve up to $16.55\times$ speed-up factor with optimal configuration. We then practically evaluate the side-channel security via uni- and bivariate Test Vector Leakage Assessment which exhibits no leakage. Finally, we use two different methods to simulate the injected fault and confirm the fault detection capability of up to $k-1$ faults, with $k$ being the replication factor.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Preprint.
History
2025-11-28: last updated
2025-11-28: published
Short URL
https://ia.cr/2025/2165
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2025/2165,
      author = {Songqiao Cui and Geng Luo and Junhan Bao and Josep Balasch and Ingrid Verbauwhede},
      title = {Extending and Accelerating Inner Product Masking  with Fault Detection via Instruction Set Extension},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/2165},
      year = {2025},
      url = {https://eprint.iacr.org/2025/2165}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.