Implementation Security in Cryptography
Instructor:
Prof. Sayandeep Saha
Course Details
| Lecture Slot | 6 |
| Lecture Venue | CC 101 |
| Lecture Schedule | Wednesday and Friday, 11:05 AM – 12:30 PM |
| Piazza | Course Piazza Page |
| Piazza Access Code | cs6102 |
| Instructor Office Hours | After class or by prior email appointment |
| Teaching Assistants | Shoaib Ahamed (24m2102 [at] iitb.ac.in) Aritra Belel (24m0814 [at] iitb.ac.in) Keyaan Kartikeya Rajesh (24b0977 [at] iitb.ac.in) Please use Piazza for general course-related queries. |
Lecture Schedule (Tentative)
Weeks 1–2: Foundations and Motivation
- Relationship between hardware security and cryptographic theory
- Fundamentals of block ciphers and hardware design principles
Weeks 3–5/6: Hardware Design of AES
- Finite field arithmetic
- Finite field multipliers
- Architectural design of AES
Weeks 7–9: Side-Channel Attacks
- Introduction to power analysis attacks
- Classification of power-based side-channel attacks
- Countermeasures against power attacks
Week 10 Onwards
- Fault injection attacks
- Fault attack countermeasures
- Advanced topics in implementation security
Detailed Lecture Plan
| Date | Topic | Prerequisites | Slides | YouTube Video | Reading / References |
|---|---|---|---|---|---|
| Jan 07 | Course Prelude and Introduction | — | Lecture 01 | Video | — |
| Jan 09 | Fundamentals and Perfect Secrecy | — | Lecture 02 | Video | Introduction to Modern Cryptography |
| Jan 14 | Computational Secrecy and Block Ciphers | Lecture 2 | Lecture 03 | Video | — |
| Jan 16 | Hardware Design Using Verilog | Basics of digital logic (MUX, flip-flops, registers, etc.) — see Resources | Lecture 04 | Video | ASIC World: Verilog HDL |
| Jan 21 | Sequential Circuits & Hardware Mapping | Lecture 4 | Lecture 4 slides + extended slides | Video | Switching and Finite Automata Theory |
| Jan 23 | Finite Fields and Hardware | — | Lecture 06 | Video | — |
| Jan 28 | Verilog Tutorial (Tutorial 1) | — | Tutorial 1 | — | · Tutorial Tab · Download Files |
| Jan 30 | Galois Fields and AES Introduction | — | Lecture 07 | Video | — |
| Feb 04 | Field Operations over Hardware | — | Lecture 08 | Video | — |
| Feb 06 | Extension Fields Isomorphism | — | Lecture 09-10 | Video | — |
| Feb 11 | Quiz - I | — | Quiz-I_solutions | — | — |
| Feb 13 | Extension Fields Isomorphism contd. | — | Lecture 09-10 | Video | — |
| Feb 18 | Optimizing Field Operations over GF(2^8) | — | Lecture 11 | Video | — |
| Feb 20 | Efficiency and Security of Different AES Implementations | — | — | Video | Sage File |
| Mar 04 | Efficient AES Mix-Column | Bitslicing | — | — | Video | — |
| Mar 06 | Side Channel Attack on AES | — | — | Video | — |
| Mar 11 | Statistical Analysis of Differential Power Attacks | — | — | Video | — |
| Mar 13 | Statistics Behind Difference of Mean Attack | — | — | Video | — |
| Mar 18 | Statistics Behind Correlation Power Attack | — | — | Video | — |
| Mar 20 | Statistics Behind Template Attacks, Modelling Noise | — | Consolidated Slides (from L11 - L18) | Video | — |
| Mar 25 | SCA Countermeasures | — | Lecture 19 | — | — |
| Mar 27 | SCA Countermeasures contd. | — | Lecture 20 | — | — |
| Apr 01 | Fault Attacks | — | Lecture 21 | — | — |
Grading Policy (Tentative)
| Component | Weight | Notes |
|---|---|---|
| Programming Assignments | 30% | Best 2 out of 3 assignments will be considered |
| Quizzes | 30% | - |
| Mid-Semester and End-Semester Examinations | 40% | - |
Note: All schedules and policies are subject to revision during the semester.