Blockchain-based immunization against kleptographic attacks  

作　　者：Changsong JIANG Chunxiang XU Jie CHEN Kefei CHEN 

机构地区：[1]School of Computer Science and Engineering,University of Electronic Science and Technology of China,Chengdu 611731,China [2]Yangtze Delta Region Institute(Huzhou),University of Electronic Science and Technology of China,Huzhou 313001,China [3]Department of Mathematics,Hangzhou Normal University,Hangzhou 310027,China

出　　处：《Science China(Information Sciences)》2024年第7期168-179,共12页中国科学（信息科学）（英文版）

基　　金：supported in part by National Nature Science Foundation of China (Grant Nos. 62272091, 61872060);National Key R&D Program of China (Grant No. 2017YFB0802000)

摘　　要：Adversarial implementations of cryptographic primitives called kleptographic attacks cause the leakage of secret information.Subliminal channel attacks are one of the kleptographic attacks.In such attacks,backdoors are embedded in implementations of randomized algorithms to elaborately control randomness generation,such that the secrets will be leaked from biased outputs.To thwart subliminal channel attacks,double-splitting is a feasible solution,which splits the randomness generator of a randomized algorithm into two independent generators.In this paper,we instantiate double-splitting to propose a secure randomness generation algorithm dubbed SRG using two physically independent generators:ordinary and public randomness generators.Based on public blockchains,we construct the public randomness generator,which can be verified publicly.Hashes of a sufficient number of consecutive blocks that are newly confirmed on a blockchain are used to produce public randomness.In SRG,outputs from the two generators are taken as inputs of an immunization function.SRG accomplishes immunization against subliminal channel attacks.Additionally,we discuss the application strategies of SRG for symmetric and public-key encryption.

关 键 词：kleptographic attacks subliminal channel blockchain IMMUNIZATION randomized algorithm 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TN918.4[自动化与计算机技术—计算机科学与技术]