<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of cea-03605072v2</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-02T10:09:31+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Code Polymorphism Meets Code Encryption: Confidentiality and Side-Channel Protection of Software Components</title>
            <author role="aut">
              <persName>
                <forename type="first">Lionel</forename>
                <surname>Morel</surname>
              </persName>
              <idno type="halauthorid">17091-0</idno>
              <affiliation ref="#struct-1071824"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Damien</forename>
                <surname>Couroussé</surname>
              </persName>
              <email type="md5">31b066d8ba9a2b023ea0b393bed695c1</email>
              <email type="domain">cea.fr</email>
              <idno type="idhal" notation="string">damien-courousse</idno>
              <idno type="idhal" notation="numeric">5874</idno>
              <idno type="halauthorid" notation="string">9759-5874</idno>
              <idno type="IDREF">https://www.idref.fr/137731981</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-2761-3627</idno>
              <affiliation ref="#struct-1071824"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Thomas</forename>
                <surname>Hiscock</surname>
              </persName>
              <idno type="halauthorid">1329270-0</idno>
              <affiliation ref="#struct-40209"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Damien</forename>
                <surname>Couroussé</surname>
              </persName>
              <email type="md5">31b066d8ba9a2b023ea0b393bed695c1</email>
              <email type="domain">cea.fr</email>
            </editor>
            <funder ref="#projanr-49925"/>
            <funder ref="#projanr-42467"/>
            <funder ref="#projeurop-714356"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1">
              <date type="whenSubmitted">2022-03-10 18:00:26</date>
            </edition>
            <edition n="v2" type="current">
              <date type="whenSubmitted">2023-10-11 10:16:17</date>
              <date type="whenModified">2026-02-07 05:26:06</date>
              <date type="whenReleased">2023-10-11 11:17:01</date>
              <date type="whenProduced">2021</date>
              <date type="whenEndEmbargoed">2023-09-21</date>
              <ref type="file" target="https://cea.hal.science/cea-03605072v2/document">
                <date notBefore="2023-09-21"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://cea.hal.science/cea-03605072v2/file/polen%20%281%29.pdf" id="file-4213969-3695958">
                <date notBefore="2023-09-21"/>
              </ref>
              <ref type="externalLink" target="http://arxiv.org/pdf/2310.07327"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="325613">
                <persName>
                  <forename>Damien</forename>
                  <surname>Couroussé</surname>
                </persName>
                <email type="md5">31b066d8ba9a2b023ea0b393bed695c1</email>
                <email type="domain">cea.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">cea-03605072</idno>
            <idno type="halUri">https://cea.hal.science/cea-03605072</idno>
            <idno type="halBibtex">morel:cea-03605072</idno>
            <idno type="halRefHtml">&lt;i&gt;Digital Threats: Research and Practice&lt;/i&gt;, 2021, https://dl.acm.org/doi/10.1145/3487058. &lt;a target="_blank" href="https://dx.doi.org/10.1145/3487058"&gt;&amp;#x27E8;10.1145/3487058&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">Digital Threats: Research and Practice, 2021, https://dl.acm.org/doi/10.1145/3487058. &amp;#x27E8;10.1145/3487058&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by-nd/4.0/">CC BY-ND 4.0 - Attribution - No Derivative Works<ref corresp="#file-4213969-3695958"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CEA">CEA - Commissariat à l'énergie atomique</idno>
            <idno type="stamp" n="UGA">HAL Grenoble Alpes</idno>
            <idno type="stamp" n="OPENAIRE">OpenAIRE</idno>
            <idno type="stamp" n="DRT" corresp="CEA">Direction de la recherche technologique</idno>
            <idno type="stamp" n="LETI" corresp="CEA">Laboratoire d'Electronique et des Technologies de l'Information</idno>
            <idno type="stamp" n="LIST" corresp="CEA">Laboratoire d'Intégration des Systèmes et des Technologies</idno>
            <idno type="stamp" n="CYBERALPS">Grenoble Alpes Cybersecurity Institute</idno>
            <idno type="stamp" n="CEA-GRE" corresp="CEA">CEA Grenoble</idno>
            <idno type="stamp" n="UGA-EPE">Université Grenoble Alpes [2020-*]</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="GS-COMPUTER-SCIENCE">Graduate School Computer Science</idno>
            <idno type="stamp" n="GS-SPORT-HUMAN-MOVEMENT">Graduate School Sport, Mouvement, Facteurs Humains</idno>
            <idno type="stamp" n="DSCIN" corresp="DRT">Département Systèmes et Circuits Intégrés Numériques</idno>
            <idno type="stamp" n="TEST-UGA">TEST-UGA</idno>
            <idno type="stamp" n="ANR_QUANTIQUE">ANR QUANTIQUE</idno>
            <idno type="stamp" n="ANR_QUANTIQUE_1" corresp="ANR_QUANTIQUE">ANR_QUANTIQUE_1</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Code Polymorphism Meets Code Encryption: Confidentiality and Side-Channel Protection of Software Components</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Lionel</forename>
                    <surname>Morel</surname>
                  </persName>
                  <idno type="halauthorid">17091-0</idno>
                  <affiliation ref="#struct-1071824"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Damien</forename>
                    <surname>Couroussé</surname>
                  </persName>
                  <email type="md5">31b066d8ba9a2b023ea0b393bed695c1</email>
                  <email type="domain">cea.fr</email>
                  <idno type="idhal" notation="string">damien-courousse</idno>
                  <idno type="idhal" notation="numeric">5874</idno>
                  <idno type="halauthorid" notation="string">9759-5874</idno>
                  <idno type="IDREF">https://www.idref.fr/137731981</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-2761-3627</idno>
                  <affiliation ref="#struct-1071824"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Thomas</forename>
                    <surname>Hiscock</surname>
                  </persName>
                  <idno type="halauthorid">1329270-0</idno>
                  <affiliation ref="#struct-40209"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">165730</idno>
                <idno type="issn">2692-1626</idno>
                <title level="j">Digital Threats: Research and Practice</title>
                <imprint>
                  <publisher>Association for Computing Machinery</publisher>
                  <biblScope unit="pp">https://dl.acm.org/doi/10.1145/3487058</biblScope>
                  <date type="datePub">2021</date>
                </imprint>
              </monogr>
              <idno type="arxiv">2310.07327</idno>
              <idno type="doi">10.1145/3487058</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-se">Computer Science [cs]/Software Engineering [cs.SE]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In this paper, we consider that, in practice, attack scenarios involving side-channel analysis combine two successive phases:an analysis phase, targeting the extraction of information about the target and the identification of possible vulnerabilities;and an exploitation phase, applying attack techniques on candidate vulnerabilities. We advocate that protections need to coverthese two phases in order to be effective against real-life attacks. We present PolEn, a toolchain and a processor architecturethat combine countermeasures in order to provide an effective mitigation of side-channel attacks: as a countermeasure againstthe analysis phase, our approach considers the use of code encryption; as a countermeasure against the exploitation phase,our approach considers the use of code polymorphism, because it relies on runtime code generation, and its combinationwith code encryption is particularly challenging. Code encryption is supported by a processor extension such that machineinstructions are only decrypted inside the CPU, which effectively prevents reverse engineering or any extraction of usefulinformation from memory dumps. Code polymorphism is implemented by software means. It regularly changes the observablebehaviour of the program, making it unpredictable for an attacker, hence reducing the possibility to exploit side-channelleakages. We present a prototype implementation, based on the RISC-V Spike simulator and a modified LLVM toolchain. Inour experimental evaluation, we illustrate that PolEn effectively reduces side-channel leakages. For the protected functionsevaluated, static memory use increases by a factor of 5 to 22, corresponding to the joint application of code encryption andcode polymorphism. The overhead, in terms of execution time, ranges between a factor of 1.8 and 4.6.</p>
            </abstract>
            <particDesc>
              <org type="consortium">CYBERALPS</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-1071824" status="VALID">
          <orgName>Laboratoire Fonctions Innovantes pour circuits Mixtes</orgName>
          <orgName type="acronym">LFIM</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>CEA-Grenoble</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-1042703" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-1071779" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="indirect"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="department" xml:id="struct-40209" status="VALID">
          <orgName>Département Systèmes</orgName>
          <orgName type="acronym">DSYS</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation name="DRT/LETI" active="#struct-40214" type="direct"/>
            <relation name="DRT" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-1042703" status="VALID">
          <idno type="IdRef">240648315</idno>
          <idno type="ROR">https://ror.org/02rx3b187</idno>
          <orgName>Université Grenoble Alpes</orgName>
          <orgName type="acronym">UGA</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Adresse CS 40700 - 38058 Grenoble cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-grenoble-alpes.fr</ref>
          </desc>
        </org>
        <org type="department" xml:id="struct-1071779" status="VALID">
          <idno type="RNSR">202123738R</idno>
          <orgName>Département Systèmes et Circuits Intégrés Numériques</orgName>
          <orgName type="acronym">DSCIN (CEA, LIST)</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="direct"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-40217" status="VALID">
          <idno type="IdRef">156836882</idno>
          <idno type="ISNI">0000 0004 0405 1788</idno>
          <idno type="RNSR">200118591H</idno>
          <idno type="ROR">https://ror.org/000dbcc61</idno>
          <idno type="Wikidata">Q30299467</idno>
          <orgName>Laboratoire d'Intégration des Systèmes et des Technologies</orgName>
          <orgName type="acronym">LIST (CEA)</orgName>
          <desc>
            <address>
              <addrLine>DRT/LISTNano-INNOVAvenue de la Vauve91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www-list.cea.fr/</ref>
          </desc>
          <listRelation>
            <relation name="DRT/LIST" active="#struct-440043" type="direct"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-440043" status="VALID">
          <idno type="IdRef">067087930</idno>
          <idno type="ISNI">0000000121157881</idno>
          <idno type="RNSR">199018589D</idno>
          <idno type="ROR">https://ror.org/02ggzyd20</idno>
          <idno type="Wikidata">Q30299418</idno>
          <orgName>Direction de Recherche Technologique (CEA)</orgName>
          <orgName type="acronym">DRT (CEA)</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.drt-cea.com/</ref>
          </desc>
          <listRelation>
            <relation name="DRT" active="#struct-300016" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300016" status="VALID">
          <idno type="IdRef">026372061</idno>
          <idno type="ISNI">0000000122998025</idno>
          <idno type="ROR">https://ror.org/00jjx8s55</idno>
          <idno type="Wikidata">Q868550</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives</orgName>
          <orgName type="acronym">CEA</orgName>
          <desc>
            <address>
              <addrLine>Centre de SaclayCentre de GrenobleCentre de Cadaracheetc</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cea.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-40214" status="VALID">
          <idno type="IdRef">026506351</idno>
          <idno type="ISNI">0000 0001 2184 7102</idno>
          <idno type="RNSR">196718590E</idno>
          <idno type="ROR">https://ror.org/04mf0wv34</idno>
          <idno type="Wikidata">Q1023249</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives - Laboratoire d'Electronique et de Technologie de l'Information</orgName>
          <orgName type="acronym">CEA-LETI</orgName>
          <date type="start">1967-01-01</date>
          <desc>
            <address>
              <addrLine>MINATEC 17, rue des Martyrs, 38054, Grenoble Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www-leti.cea.fr/</ref>
          </desc>
          <listRelation>
            <relation name="DRT" active="#struct-440043" type="direct"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-49925" status="VALID">
          <idno type="anr">ANR-10-AIRT-0005</idno>
          <orgName>NANOELEC</orgName>
          <desc>NANOELEC</desc>
          <date type="start">2010</date>
        </org>
        <org type="anrProject" xml:id="projanr-42467" status="VALID">
          <idno type="anr">ANR-15-IDEX-0002</idno>
          <orgName>UGA</orgName>
          <desc>IDEX UGA</desc>
          <date type="start">2015</date>
        </org>
        <org type="europeanProject" xml:id="projeurop-714356" status="INCOMING">
          <idno type="number">16 004</idno>
          <desc>SERENE-IoT</desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>