Newest papers

DM-RSA-OAEP: Formal Treatment of a Dual-Modulus Fault-Detection Countermeasure Based on Physical Diversity

Ramamonjy Andriamifidisoa, Rufine Marius Lalasoa · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.26642 · cited by 0 works (OpenAlex) · open-access PDF

French

Nous donnons un traitement formel de sa variante réparée, DM-RSA-OAEP: (i) une preuve de sécurité IND-CCA2 complète dans le modèle oracle aléatoire via un argument hybride en deux étapes, limitant la sécurité du schéma par celle de l'instance RSA-OAEP sous-jacente plus faible, avec une perte de simulation explicite; (ii) un théorème de détection de défaut dans un modèle adversaire explicite qui couvre les défauts de calcul, de clé et de vérification, y compris les attaques d'erreur de sécurité, sous une hypothèse de physique-diversité clairement énoncée; (iii) une analyse explicite de pourquoi la contre-mesure dégrade à l'inutilité lorsque l'hypothèse du proto

Machine translation (Meta M2M100); the English original follows.

Abstract

We revisit DM-RSA, an RSA variant that uses two independent moduli, whose original version was broken by Håstad's attack and contained an incorrect compromise-tolerance claim. We give a formal treatment of its repaired variant, DM-RSA-OAEP: (i) a complete IND-CCA2 security proof in the random-oracle model via a two-step hybrid argument, upper-bounding the security of the scheme by that of the weaker underlying RSA-OAEP instance, with an explicit simulation loss; (ii) a fault-detection theorem in an explicit adversary model that covers computation, key, and verification faults, including safe-error attacks, under a clearly stated physical-diversity assumption; (iii) an explicit analysis of why the countermeasure degrades to uselessness when the diversity assumption is violated (common-mode faults on a single chip). We position the scheme against the countermeasure landscape and against the broken dual-modulus literature. The contribution is deliberately framed as a fault countermeasure with a provable detection guarantee, not as a computationally stronger RSA. We conclude with a concrete instantiation and a detailed measurement protocol.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Countermeasure, Adversary, Computer security, Scheme (mathematics), Computer science, Diversity (politics)

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange