Backdooring Post-Quantum Cryptography: Kleptographic Attacks on Lattice-based KEMs

Prasanna Ravi; Shivam Bhasin; Anupam Chattopadhyay; Aikata Aikata; Sujoy Sinha Roy

doi:10.1145/3649476.3660373

Backdooring Post-Quantum Cryptography: Kleptographic Attacks on Lattice-based KEMs

Prasanna Ravi, Shivam Bhasin, Anupam Chattopadhyay, Aikata Aikata, Sujoy Sinha Roy

Institute of Information Security (7050)

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband › Begutachtung

Abstract

Post-quantum Cryptography (PQC) has reached the verge of standardization competition, with Kyber as a winning candidate. In this work, we demonstrate practical backdoor insertion in Kyber through kleptrography. The backdoor can be inserted using classical techniques like ECDH or post-quantum Classic Mceliece. The inserted backdoor targets the key generation procedure where generated output public keys subliminally leak information about the secret key to the owner of the backdoor. We demonstrate first practical instantiations of such attack at the protocol level by validating it on TLS 1.3.

Originalsprache	englisch
Titel	GLSVLSI 2024 - Proceedings of the Great Lakes Symposium on VLSI 2024
Herausgeber (Verlag)	Association of Computing Machinery
Seiten	216 - 221
Seitenumfang	6
ISBN (elektronisch)	9798400706059
DOIs	https://doi.org/10.1145/3649476.3660373
Publikationsstatus	Veröffentlicht - 12 Juni 2024
Veranstaltung	34th Great Lakes Symposium on VLSI: GLSVLSI 2024 - Tampa Bay Area, USA / Vereinigte Staaten Dauer: 12 Juni 2024 → 14 Juni 2024

Konferenz

Konferenz	34th Great Lakes Symposium on VLSI
Land/Gebiet	USA / Vereinigte Staaten
Ort	Tampa Bay Area
Zeitraum	12/06/24 → 14/06/24

ASJC Scopus subject areas

Informatik (sonstige)
Allgemeiner Maschinenbau

Zugriff auf Dokument

10.1145/3649476.3660373Lizenz: CC BY 4.0

Andere Dateien und Links

Verknüpfung zur Publikation in Scopus

Dieses zitieren

Backdooring Post-Quantum Cryptography: Kleptographic Attacks on Lattice-based KEMs. / Ravi, Prasanna; Bhasin, Shivam; Chattopadhyay, Anupam et al.
GLSVLSI 2024 - Proceedings of the Great Lakes Symposium on VLSI 2024. Association of Computing Machinery, 2024. S. 216 - 221.

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband › Begutachtung

Ravi, P, Bhasin, S, Chattopadhyay, A, Aikata, A & Sinha Roy, S 2024, Backdooring Post-Quantum Cryptography: Kleptographic Attacks on Lattice-based KEMs. in GLSVLSI 2024 - Proceedings of the Great Lakes Symposium on VLSI 2024. Association of Computing Machinery, S. 216 - 221, 34th Great Lakes Symposium on VLSI, Tampa Bay Area, Florida, USA / Vereinigte Staaten, 12/06/24. https://doi.org/10.1145/3649476.3660373

@inproceedings{6935c49722e14784829c8dbcfa1c15fb,

title = "Backdooring Post-Quantum Cryptography: Kleptographic Attacks on Lattice-based KEMs",

abstract = "Post-quantum Cryptography (PQC) has reached the verge of standardization competition, with Kyber as a winning candidate. In this work, we demonstrate practical backdoor insertion in Kyber through kleptrography. The backdoor can be inserted using classical techniques like ECDH or post-quantum Classic Mceliece. The inserted backdoor targets the key generation procedure where generated output public keys subliminally leak information about the secret key to the owner of the backdoor. We demonstrate first practical instantiations of such attack at the protocol level by validating it on TLS 1.3.",

keywords = "ost Quantum Cryptography, Kyber, Kleptography, Backdoors, Backdoor, Post Quantum Cryptography",

author = "Prasanna Ravi and Shivam Bhasin and Anupam Chattopadhyay and Aikata Aikata and {Sinha Roy}, Sujoy",

year = "2024",

month = jun,

day = "12",

doi = "10.1145/3649476.3660373",

language = "English",

pages = "216 -- 221",

booktitle = "GLSVLSI 2024 - Proceedings of the Great Lakes Symposium on VLSI 2024",

publisher = "Association of Computing Machinery",

address = "United States",

note = "34th Great Lakes Symposium on VLSI : GLSVLSI 2024 ; Conference date: 12-06-2024 Through 14-06-2024",

}

TY - GEN

T1 - Backdooring Post-Quantum Cryptography: Kleptographic Attacks on Lattice-based KEMs

AU - Ravi, Prasanna

AU - Bhasin, Shivam

AU - Chattopadhyay, Anupam

AU - Aikata, Aikata

AU - Sinha Roy, Sujoy

PY - 2024/6/12

Y1 - 2024/6/12

N2 - Post-quantum Cryptography (PQC) has reached the verge of standardization competition, with Kyber as a winning candidate. In this work, we demonstrate practical backdoor insertion in Kyber through kleptrography. The backdoor can be inserted using classical techniques like ECDH or post-quantum Classic Mceliece. The inserted backdoor targets the key generation procedure where generated output public keys subliminally leak information about the secret key to the owner of the backdoor. We demonstrate first practical instantiations of such attack at the protocol level by validating it on TLS 1.3.

AB - Post-quantum Cryptography (PQC) has reached the verge of standardization competition, with Kyber as a winning candidate. In this work, we demonstrate practical backdoor insertion in Kyber through kleptrography. The backdoor can be inserted using classical techniques like ECDH or post-quantum Classic Mceliece. The inserted backdoor targets the key generation procedure where generated output public keys subliminally leak information about the secret key to the owner of the backdoor. We demonstrate first practical instantiations of such attack at the protocol level by validating it on TLS 1.3.

KW - ost Quantum Cryptography

KW - Kyber

KW - Kleptography

KW - Backdoors

KW - Backdoor

KW - Post Quantum Cryptography

UR - http://www.scopus.com/inward/record.url?scp=85197891232&partnerID=8YFLogxK

U2 - 10.1145/3649476.3660373

DO - 10.1145/3649476.3660373

M3 - Conference paper

SP - 216

EP - 221

BT - GLSVLSI 2024 - Proceedings of the Great Lakes Symposium on VLSI 2024

PB - Association of Computing Machinery

T2 - 34th Great Lakes Symposium on VLSI

Y2 - 12 June 2024 through 14 June 2024

ER -

Backdooring Post-Quantum Cryptography: Kleptographic Attacks on Lattice-based KEMs

Abstract

Konferenz

ASJC Scopus subject areas

Zugriff auf Dokument

Andere Dateien und Links

Fingerprint

Dieses zitieren