<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of cea-04321178</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-25T08:49:10+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">A tale of resilience: On the practical security of masked software implementations</title>
            <author role="aut">
              <persName>
                <forename type="first">Lorenzo</forename>
                <surname>Casalino</surname>
              </persName>
              <email type="md5">b2d4f5b4cc54ce475075ac71ea65a20f</email>
              <email type="domain">centralesupelec.fr</email>
              <ptr type="url" target="https://doktorc.github.io/"/>
              <idno type="idhal" notation="string">casalino-lorenzo</idno>
              <idno type="idhal" notation="numeric">1380040</idno>
              <idno type="halauthorid" notation="string">2977743-1380040</idno>
              <idno type="ORCID">https://orcid.org/0009-0005-4195-8850</idno>
              <idno type="IDREF">https://www.idref.fr/277492785</idno>
              <affiliation ref="#struct-1071824"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Nicolas</forename>
                <surname>Belleville</surname>
              </persName>
              <idno type="halauthorid">1277400-0</idno>
              <affiliation ref="#struct-1071824"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Damien</forename>
                <surname>Couroussé</surname>
              </persName>
              <idno type="halauthorid">9759-0</idno>
              <affiliation ref="#struct-1071824"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Karine</forename>
                <surname>Heydemann</surname>
              </persName>
              <idno type="halauthorid">19187-0</idno>
              <affiliation ref="#struct-250969"/>
              <affiliation ref="#struct-541712"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Contributeur MAP</forename>
                <surname>CEA</surname>
              </persName>
              <email type="md5">abb42943d34935171157f3fe9edfc3b1</email>
              <email type="domain">cea.fr</email>
            </editor>
            <funder ref="#projanr-51910"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2023-12-04 14:30:35</date>
              <date type="whenModified">2025-09-27 19:24:01</date>
              <date type="whenReleased">2023-12-05 16:23:45</date>
              <date type="whenProduced">2023-07-24</date>
              <date type="whenEndEmbargoed">2023-12-04</date>
              <ref type="file" target="https://cea.hal.science/cea-04321178v1/document">
                <date notBefore="2023-12-04"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://cea.hal.science/cea-04321178v1/file/A%20tale%20of%20resilience.pdf" id="file-4321178-3769317">
                <date notBefore="2023-12-04"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="643748">
                <persName>
                  <forename>Contributeur MAP</forename>
                  <surname>CEA</surname>
                </persName>
                <email type="md5">abb42943d34935171157f3fe9edfc3b1</email>
                <email type="domain">cea.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">cea-04321178</idno>
            <idno type="halUri">https://cea.hal.science/cea-04321178</idno>
            <idno type="halBibtex">casalino:cea-04321178</idno>
            <idno type="halRefHtml">&lt;i&gt;IEEE Access&lt;/i&gt;, 2023, 11, pp.84651-84669. &lt;a target="_blank" href="https://dx.doi.org/10.1109/ACCESS.2023.3298436"&gt;&amp;#x27E8;10.1109/ACCESS.2023.3298436&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">IEEE Access, 2023, 11, pp.84651-84669. &amp;#x27E8;10.1109/ACCESS.2023.3298436&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4321178-3769317"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CEA">CEA - Commissariat à l'énergie atomique</idno>
            <idno type="stamp" n="UGA">HAL Grenoble Alpes</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="LIP6" corresp="SORBONNE-UNIVERSITE">Laboratoire d'Informatique de Paris 6</idno>
            <idno type="stamp" n="DRT" corresp="CEA">Direction de la recherche technologique</idno>
            <idno type="stamp" n="LIST" corresp="CEA">Laboratoire d'Intégration des Systèmes et des Technologies</idno>
            <idno type="stamp" n="SORBONNE-UNIVERSITE">Sorbonne Université</idno>
            <idno type="stamp" n="SORBONNE-UNIV" corresp="SORBONNE-UNIVERSITE">Sorbonne Université 01/01/2018</idno>
            <idno type="stamp" n="CYBERALPS">Grenoble Alpes Cybersecurity Institute</idno>
            <idno type="stamp" n="SU-SCIENCES" corresp="SORBONNE-UNIVERSITE">Faculté des Sciences de Sorbonne Université</idno>
            <idno type="stamp" n="UGA-EPE">Université Grenoble Alpes [2020-*]</idno>
            <idno type="stamp" n="SU-TI">Sorbonne Université - Texte Intégral</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="GS-COMPUTER-SCIENCE">Graduate School Computer Science</idno>
            <idno type="stamp" n="GS-SPORT-HUMAN-MOVEMENT">Graduate School Sport, Mouvement, Facteurs Humains</idno>
            <idno type="stamp" n="DSCIN" corresp="DRT">Département Systèmes et Circuits Intégrés Numériques</idno>
            <idno type="stamp" n="ALLIANCE-SU"> Alliance Sorbonne Université</idno>
            <idno type="stamp" n="MAP-CEA" corresp="CEA">MAP-contributeur</idno>
            <idno type="stamp" n="SUPRA_MATHS_INFO">Mathématiques + Informatique</idno>
            <idno type="stamp" n="TEST-UGA">TEST-UGA</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">A tale of resilience: On the practical security of masked software implementations</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Lorenzo</forename>
                    <surname>Casalino</surname>
                  </persName>
                  <email type="md5">b2d4f5b4cc54ce475075ac71ea65a20f</email>
                  <email type="domain">centralesupelec.fr</email>
                  <ptr type="url" target="https://doktorc.github.io/"/>
                  <idno type="idhal" notation="string">casalino-lorenzo</idno>
                  <idno type="idhal" notation="numeric">1380040</idno>
                  <idno type="halauthorid" notation="string">2977743-1380040</idno>
                  <idno type="ORCID">https://orcid.org/0009-0005-4195-8850</idno>
                  <idno type="IDREF">https://www.idref.fr/277492785</idno>
                  <affiliation ref="#struct-1071824"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Nicolas</forename>
                    <surname>Belleville</surname>
                  </persName>
                  <idno type="halauthorid">1277400-0</idno>
                  <affiliation ref="#struct-1071824"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Damien</forename>
                    <surname>Couroussé</surname>
                  </persName>
                  <idno type="halauthorid">9759-0</idno>
                  <affiliation ref="#struct-1071824"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Karine</forename>
                    <surname>Heydemann</surname>
                  </persName>
                  <idno type="halauthorid">19187-0</idno>
                  <affiliation ref="#struct-250969"/>
                  <affiliation ref="#struct-541712"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">107030</idno>
                <idno type="issn">2169-3536</idno>
                <idno type="eissn">2169-3536</idno>
                <title level="j">IEEE Access</title>
                <imprint>
                  <publisher>IEEE</publisher>
                  <biblScope unit="volume">11</biblScope>
                  <biblScope unit="pp">84651-84669</biblScope>
                  <date type="datePub">2023-07-24</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/ACCESS.2023.3298436</idno>
              <ref type="publisher">https://ieeexplore.ieee.org/document/10192386</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Security</term>
                <term xml:lang="en">Encoding</term>
                <term xml:lang="en">Resilience</term>
                <term xml:lang="en">Random variables</term>
                <term xml:lang="en">Registers</term>
                <term xml:lang="en">Side-channel attacks</term>
                <term xml:lang="en">Microarchitecture</term>
                <term xml:lang="en">Software engineering</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-es">Computer Science [cs]/Embedded Systems</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Masking constitutes a provably-secure approach against side-channel attacks. However, recombination effects(e.g., transitions) severely reduce the proven security. Concerning the software domain, CPU microarchitectures encompass techniques improving the execution performances. Several studies show that such techniques induce recombination effects. Furthermore, these techniques implicitly induce some form of parallelism, and the potential associated threat has never been investigated. In addition, the practicalsecurity of masking relies on the chosen masking scheme. Few works analysed the security of software protected by different masking schemes, and none considered the parallelism threat. Thus, literature lacks of a more comprehensive investigation on the practical security of software implementations relying on various masking schemes in presence of micro-architecture-induced recombination effects and parallelism. This work performs a first step to fill this gap. Specifically, we evaluate the practical security offered by first-order Boolean, arithmetic-sum and inner-product masking against transitions and parallelism in software. We firstly assess the presence of transition and parallel-based leakages in software. Secondly, we evaluate the security of the encodings of the selected masking schemes with respect to each leakage source via micro-benchmarks. Thirdly, we assess the practical security of different AES-128 software implementations, one for each selected masking scheme. We carry out the investigation on the STM32F215 and STM32F303 micro-controllers. We show that (1) CPU’s parallel features allow successful attacks against masked implementations resistant to  transition-based leakages; (2) implementation choices (e.g., finite field multiplication) impact on the practical security of masked software implementations in presence of recombination effects.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-1071824" status="VALID">
          <orgName>Laboratoire Fonctions Innovantes pour circuits Mixtes</orgName>
          <orgName type="acronym">LFIM</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>CEA-Grenoble</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-1042703" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-1071779" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="indirect"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-250969" status="VALID">
          <orgName>THALES [France]</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.thalesgroup.com/fr/europe/france</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-541712" status="VALID">
          <orgName>Architecture et Logiciels pour Systèmes Embarqués sur Puce</orgName>
          <orgName type="acronym">ALSOC</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-541703" type="direct"/>
            <relation active="#struct-413221" type="indirect"/>
            <relation name="UMR7606" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-1042703" status="VALID">
          <idno type="IdRef">240648315</idno>
          <idno type="ROR">https://ror.org/02rx3b187</idno>
          <orgName>Université Grenoble Alpes</orgName>
          <orgName type="acronym">UGA</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Adresse CS 40700 - 38058 Grenoble cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-grenoble-alpes.fr</ref>
          </desc>
        </org>
        <org type="department" xml:id="struct-1071779" status="VALID">
          <idno type="RNSR">202123738R</idno>
          <orgName>Département Systèmes et Circuits Intégrés Numériques</orgName>
          <orgName type="acronym">DSCIN (CEA, LIST)</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="direct"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-40217" status="VALID">
          <idno type="IdRef">156836882</idno>
          <idno type="ISNI">0000 0004 0405 1788</idno>
          <idno type="RNSR">200118591H</idno>
          <idno type="ROR">https://ror.org/000dbcc61</idno>
          <idno type="Wikidata">Q30299467</idno>
          <orgName>Laboratoire d'Intégration des Systèmes et des Technologies</orgName>
          <orgName type="acronym">LIST (CEA)</orgName>
          <desc>
            <address>
              <addrLine>DRT/LISTNano-INNOVAvenue de la Vauve91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www-list.cea.fr/</ref>
          </desc>
          <listRelation>
            <relation name="DRT/LIST" active="#struct-440043" type="direct"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-440043" status="VALID">
          <idno type="IdRef">067087930</idno>
          <idno type="ISNI">0000000121157881</idno>
          <idno type="RNSR">199018589D</idno>
          <idno type="ROR">https://ror.org/02ggzyd20</idno>
          <idno type="Wikidata">Q30299418</idno>
          <orgName>Direction de Recherche Technologique (CEA)</orgName>
          <orgName type="acronym">DRT (CEA)</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.drt-cea.com/</ref>
          </desc>
          <listRelation>
            <relation name="DRT" active="#struct-300016" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300016" status="VALID">
          <idno type="IdRef">026372061</idno>
          <idno type="ISNI">0000000122998025</idno>
          <idno type="ROR">https://ror.org/00jjx8s55</idno>
          <idno type="Wikidata">Q868550</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives</orgName>
          <orgName type="acronym">CEA</orgName>
          <desc>
            <address>
              <addrLine>Centre de SaclayCentre de GrenobleCentre de Cadaracheetc</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cea.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-541703" status="VALID">
          <idno type="IdRef">13558292X</idno>
          <idno type="RNSR">199712651U</idno>
          <idno type="ROR">https://ror.org/05krcen59</idno>
          <orgName>LIP6</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <addrLine>4 Place JUSSIEU 75252 PARIS CEDEX 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.lip6.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-413221" type="direct"/>
            <relation name="UMR7606" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-413221" status="VALID">
          <idno type="IdRef">221333754</idno>
          <idno type="ROR">https://ror.org/02en5vm52</idno>
          <orgName>Sorbonne Université</orgName>
          <orgName type="acronym">SU</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <addrLine>21 rue de l’École de médecine - 75006 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.sorbonne-universite.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-51910" status="VALID">
          <idno type="anr">ANR-20-CE39-0010</idno>
          <orgName>IDROMEL</orgName>
          <desc>Conception de systèmes sécurisés par une réduction des effets de la micro-architecture sur les attaques par canaux auxiliaires</desc>
          <date type="start">2020</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>