White-Box Implementation of ECDSA Based on the Cloud Plus Side Mode

Abstract EN

White-box attack context assumes that the running environments of algorithms are visible and modifiable.

Algorithms that can resist the white-box attack context are called white-box cryptography.

The elliptic curve digital signature algorithm (ECDSA) is one of the most widely used digital signature algorithms which can provide integrity, authenticity, and nonrepudiation.

Since the private key in the classical ECDSA is plaintext, it is easy for attackers to obtain the private key.

To increase the security of the private key under the white-box attack context, this article presents an algorithm for the white-box implementation of ECDSA.

It uses the lookup table technology and the “cloud plus side” mode to protect the private key.

The residue number system (RNS) theory is used to reduce the size of storage.

Moreover, the article analyzes the security of the proposed algorithm against an exhaustive search attack, a random number attack, a code lifting attack, and so on.

The efficiency of the proposed scheme is compared with that of the classical ECDSA through experiments.