Cryptanalysis of the countermeasures using randomized binary signed digits

Dong Guk Han, Katsuyuki Okeya, Tae Hyun Kim, Yoon Sung Hwang, Young Ho Park, Souhwan Jung

Research output: Contribution to journalArticle

3 Citations (Scopus)


Recently, side channel attacks (SCA) have been recognized as menaces to public key cryptosystems. In SCA, an attacker observes side channel information during cryptographic operations, and reveals the secret scalar using the side channel information. On the other hand, elliptic curve cryptosystems (ECC) are suitable for implementing on smartcards. Since a scalar multiplication is a dominant step in ECC, we need to design an algorithm to compute scalar multiplication with the immunity to SCA. For this purpose, several scalar multiplication methods that utilize randomized binary-signed-digit (BSD) representations were proposed. This type of countermeasures includes Ha-Moon's countermeasure, Ebeid-Hasan's one, and Agagliate's one. In this paper we propose a novel general attack against "all" the countermeasures of this type. The proposed attack lists the candidates for the secret scalar, however straight-forward approach requires huge memory, thus it is infeasible. The proposed attack divides the table into small tables, which reduces the memory requirement. For example, the computational cost and the memory requirement of the proposed attack for revealing the 163-bit secret key are O(2 8) and O(2 23), respectively, using 20 observations on the scalar multiplication with Ha-Moon's countermeasure. The computational cost and the memory requirement are O(2 21) and O(2 12) for Ebeid-Hasan's one, and O(2 40) and O(2 6) for Agagliate's one. If 40 observations are used, computational cost for Agagliate's one is reduced to O(2 33). Whenever we utilize a countermeasure of BSD type, we should beware of the proposed attack. In other words, the security of BSD type is controversial.

Original languageEnglish
Pages (from-to)398-413
Number of pages16
JournalLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Publication statusPublished - 2004 Dec 1


  • Agagliate's Countermeasure
  • BSD Representation
  • DPA
  • Ebeid-Hasan's Countermeasure
  • Elliptic Curve Cryptosystem
  • Ha-Moon's Countermeasure
  • Side Channel Attacks
  • SPA

ASJC Scopus subject areas

  • Computer Science(all)
  • Biochemistry, Genetics and Molecular Biology(all)
  • Theoretical Computer Science

Fingerprint Dive into the research topics of 'Cryptanalysis of the countermeasures using randomized binary signed digits'. Together they form a unique fingerprint.

  • Cite this