Workload Characterization of a Lightweight SSL Implementation Resistant to Side-Channel Attacks

Abstract. Ever-growing mobility and ubiquitous wireless Internet access raise the need for secure communication with devices that may be severely constrained in terms of processing power, memory capacity and network speed. In this paper we describe a lightweight implementation of the Secure Sockets Layer (SSL) protocol with a focus on small code size and low memory usage. We integrated a generic public-key crypto library into this SSL stack to support elliptic curve cryptography over arbitrary prime and binary fields. Furthermore, we aimed to secure the SSL handshake against side-channel attacks (in particular simple power analysis) by eliminating all data-dependent or key-dependent branches and memory accesses from the arithmetic operations and compare the resulting performance with an unprotected implementation. Our lightweight SSL stack has only 6% of the code size and RAM requirements of OpenSSL, but outperforms it in point multiplication over prime fields when no appropriate count...

• Type: Conference
• Year: 2008
• Where: CANS
• Authors: Manuel Koschuch, Johann Großschädl, Udo Payer, Matthias Hudler, Michael Krüger
• Keywords: CANS 2008, Cryptology, Side-channel Attacks, SSL Handshake, SSL Stack