CISPA
Browse
2024-260.pdf (610.99 kB)

Kleptographic Attacks against Implicit Rejection.

Download (610.99 kB)
preprint
posted on 2024-05-22, 12:24 authored by Antoine JouxAntoine Joux, Julian LossJulian Loss, Benedikt Wagner
Given its integral role in modern encryption systems such as CRYSTALS-Kyber, the Fujisaki-Okamoto (FO) transform will soon be at the center of our secure communications infrastructure. An enduring debate surrounding the FO transform is whether to use explicit or implicit rejection when decapsulation fails. Presently, implicit rejection, as implemented in CRYSTALS-Kyber, is supported by a strong set of arguments. Therefore, understanding its security implications in different attacker models is essential. In this work, we study implicit rejection through a novel lens, namely, from the perspective of kleptography. Concretely, we consider an attacker model in which the attacker can subvert the user's code to compromise security while remaining undetectable. In this scenario, we present three attacks that significantly reduce the security level of the FO transform with implicit rejection. Notably, our attacks apply to CRYSTALS-Kyber.

History

Primary Research Area

  • Algorithmic Foundations and Cryptography

BibTeX

@misc{Joux:Loss:Wagner:2024, title = "Kleptographic Attacks against Implicit Rejection.", author = "Joux, Antoine" AND "Loss, Julian" AND "Wagner, Benedikt", year = 2024, month = 2 }

Usage metrics

    Categories

    No categories selected

    Licence

    Exports

    RefWorks
    BibTeX
    Ref. manager
    Endnote
    DataCite
    NLM
    DC