Partenaires | Objectifs |
Laboratoire PRISM Université de Versailles St-Quentin en Yvelines Louis Goubin (coordinateur du projet) Jacques Patarin Antoine Joux Laboratoire LIENS Ecole Normale Supérieure David Pointcheval (coordinateur local) Laboratoire LaBRI Université Bordeaux I Olivier Ly (coordinateur local) Serge Chaumette Mohamed Mosbah |
Confidentialité du code exécutable Approfondissement des modèles récents d’attaques prenant en compte la nature physique des calculs dans les systèmes embarqués. Étude rigoureuse du concept d’ « obfuscation de code » : analyse de la résistance cryptographique, proposition de nouveaux schémas. Intégrité et authenticité du code Architectures pour externaliser le code. Étude de leur sécurisation, en étendant au besoin les protocoles cryptographiques déjà existants (mais souvent conçus pour des objets statiques et non dynamiques). Preuves de sécurité et méthodes formelles Applications des méthodes de "proof carrying code" pour un code potentiellement malicieux. Plus généralement, définition et implémentation d'outils de spécifications incluant les politiques de sécurité dans le cadre des systèmes distribués. |
[2] S. Chaumette, A. Karray et D. Sauveron. Secure Collaborative
and Distributed Services in the Java Card Grid Platform. The 2006
International
Symposium on Collaborative Technologies and Systems (CTS 2006),
Workshop on
Collaboration and Security (COLSEC'06). 14
17 mai 2006, Las Vegas, Nevada, USA.
[3] S. Chaumette, K. Markantonakis, K. Mayes et D. Sauveron. The
[4] S. Chaumette, A. Karray et D. Sauveron. Extended Secure
Memory for a Java Card in the Context of the Java Card Grid project.
11th IEEE
Nordic Workshop on Secure IT-systems: NordSec 2006. 19-20 octobre 2006, Linköping, Suède.
[5] P.A. Fouque, S. Kunz-Jacques, G. Martinet, F. Muller, and
F.
Valette. “Power Attack on Small RSA
Public Exponent”. Proceedings of the 8th
International Workshop on Cryptographic Hardware and Embedded Systems
(CHES
'06), LNCS 4249, Springer-Verlag, 2006.
[6] V. Gratzer, D.
Naccache, and D. Znaty, “Law Enforcement, Forensics and
pages 256--260, IEEE
Computer Society Washington, DC, USA. 2006
[7] V. Gratzer and
D. Naccache, “Alien vs. Quine, the Vanishing Circuit and Other Tales
from the
Industry’s Crypt”. Proceedings of the 24th Annual International
Conference on
the Theory and Applications of Cryptographic Techniques (EUROCRYPT
'06), LNCS
4004, pages 48-58, Springer-Verlag, 2006.
[8] H. Hamdi, A Bouhoula et M. Mosbah. Specification and
refinement of security policy: a programming language technology
approach. In
8th International Symposium on Systems and Information Security, Sao
Jose dos
Campos, Sao Paulo, Brazil, November 08-10, 2006. IEEE, to appear.
[9] H. Hamdi, A Bouhoula et M. Mosbah. A policy Based
approach for securing distributed systems. In /Inscrypt 2006: The 2nd
SKLOIS Conference
on Information Security and Cryptology (formerly CISC)/, Nov. 29 - Dec.
1,
2006,
[10] M. Loulou, A.
Hadj Kacem, M. Jmaiel, M. Mosbah. A Conceptual Model for Secure
[11]
[12] Pascal Delaunay, Antoine Joux. “Galois LFSR, Embedded Devices and Side Channel Weaknesses”. Proceedings of INDOCRYPT 2006, LNCS, Springer Verlag, 2006.
[13]
[15] Steven Gay, « État de l’art sur les méthodes de protection de code ». Rapport de stage, Laboratoire LIENS.
[16]
[17] Eve Atallah,
Conférences internationales avec comité de lecture
[1] The Carry Leakage on the Randomized Exponent Countermeasure,
M. Drissi, P.-A. Fouque, D. Réal and F. Valette,
CHES 2008, pp. -, Springer-Verlag, 2008.
[2] Fault Attack on Elliptic Curve with Montgomery Ladder Implementation,
P.-A. Fouque, R. Lercier, D. Réal and F. Valette,
FDTC 2008, pp. - , IEEE Press, 2008.
[3] J. Patarin, V. Nachef, C. Berbain, Generic attacks on unbalanced
Feistel Schemes with expanding functions. In Proceedings of ASIACRYPT
2007, Springer LNCS 4833, pp.325-341.
[4] L. Goubin, J.-M. Masereel, M. Quisquater : Cryptanalysis of White
Box DES Implementations. In Selected Areas in Cryptography 2007, LNCS
4876, pp. 278-295. Springer-Verlag, 2007.
[5] J. Patarin, A proof of security in O(2^n) for the Benes Scheme. In
Proceedings of AFRICACRYPT 2008, Springer LNCS 5023, June 2008,
pp.209-220.
[6] P. Camion, J. Patarin: t-resilient functions and the partial
exposure problem. Appl. Algebra Eng. Commun. Comput. 19 (2): 99-133
(2008).
[7] J. Patarin, Proof of security in O(2^n) for the Xor of two random
permutations, paper accepted at ICITS 2008, august 2008.
[8] Y. Seurin, J. Patarin, Building Secure Block Ciphers on Generic
Attacks Assumptions, paper accepted at SAC 2008, august 2008, Springer.
[9] A. Berzati, C. Canovas, L. Goubin, "Perturbating RSA Public Keys:
an Improved Attack". In Proceedings of CHES’2008, LNCS,
Springer-Verlag, 2008.
[10] A. Berzati, C. Canovas, L. Goubin, “Security against Fault
Injection Attacks for CRT-RSA Implementations”. In Proceedings of
FDTC’2008. IEEE-CS Press, 2008.
[11] B. Debraize, L. Goubin, “Guess-and-Determine Algebraic
Attack on the Self-Shrinking Generator”. In Proceedings of
FSE’2008, LNCS, Springer-Verlag, 2008.
[12] VisAA: Visual Analyzer for Assembler.
Andouard P., O. Ly, D. Rouillard. In Proceedings of CRISIS'2008 - 3rd
Int. Conf. on Risks and Security of Internet and Systems. Tozeur,
Tunisie.
[13] Rationale for defining NCIPs (Neighborhood and Context Interaction Primitives)
J. Albert, S. Chaumette
In Proceedings of AmI.d 2007, Intl. Conf on Ambient Intelligence Developments (AmI.d'07), Sophia-Antopolis, France.
[14] Using Sensor Networks, RFIDs and XBee
J. Albert, L. Barrere, and S. Chaumette*
Invited tutorial at WISTP 2008, 2nd edition of WISTP, Workshop in Information Security Theory and Practices*
May 13-16, 2008, Sevilla, Spain
[15] A Virtual, Unlimited in Size, and Secure File System Embedded in A Smart Card*
I. Chadid, S. Chaumette, R. Laplace, D. Dubernet, C. Masci, V. Prince
In Proceedings of the 9th International Conference e-Smart05. Nice, France. September 17-19 2008.
Autres
[16] Practical Side Channel Cryptanalysis on HMAC,
P.-A. Fouque, G. Leurent, D. Réal and F. Valette,
en soumission.
[17] The JCATools Testbed
A Java Card emulator for the test and evaluation of applets
S. Chaumette and J. Bernet and O. Ly
Poster at WISTP 2008, 2nd edition of WISTP, Workshop in Information Security Theory and Practices*
May 13-16, 2008, Sevilla, Spain
[18] A Secure Mobile Agent System for Connected possibly Mobile Terminals Embedding Smart Cards
S. Chaumette , D. Dubernet, K. Markantonakis, K. Mayes
Poster at WISTP 2008, 2nd edition of WISTP, Workshop in Information Security Theory and Practices*
May 13-16, 2008, Sevilla, Spain
[19] Java software protection using Java Card Technology
S. Chaumette, O. Ly and R. Tabary
Poster at WISTP 2008, 2nd edition of WISTP, Workshop in Information Security Theory and Practices*
May 13-16, 2008, Sevilla, Spain