Newest papers

DM-RSA-OAEP: Formal Treatment of a Dual-Modulus Fault-Detection Countermeasure Based on Physical Diversity

Ramamonjy Andriamifidisoa, Rufine Marius Lalasoa · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.26642 · cited by 0 works (OpenAlex) · open-access PDF

Indonesian

Kami memberikan perawatan formal dari varian yang diperbaiki, DM-RSA-OAEP: (i) bukti keamanan IND-CCA2 lengkap dalam model random-oracle melalui argumen hibrida dua langkah, membatasi keamanan skema oleh yang dari instansi RSA-OAEP yang lebih lemah yang mendasarinya, dengan hilangnya simulasi eksplisit; (ii) teorema deteksi cacat dalam model lawan eksplisit yang mencakup perhitungan, kunci, dan kesalahan verifikasi, termasuk serangan kesalahan aman, di bawah asumsi fisika-diversitas yang jelas; (iii) analisis eksplisit mengapa countermeasure merosot ke ketidaknyamanan ketika asumsi diversity protocol diperbolehkan (common-scode fault on land counter-chips a dual countermeasure as a measurement against the computing framework).

Machine translation (Meta M2M100); the English original follows.

Abstract

We revisit DM-RSA, an RSA variant that uses two independent moduli, whose original version was broken by Håstad's attack and contained an incorrect compromise-tolerance claim. We give a formal treatment of its repaired variant, DM-RSA-OAEP: (i) a complete IND-CCA2 security proof in the random-oracle model via a two-step hybrid argument, upper-bounding the security of the scheme by that of the weaker underlying RSA-OAEP instance, with an explicit simulation loss; (ii) a fault-detection theorem in an explicit adversary model that covers computation, key, and verification faults, including safe-error attacks, under a clearly stated physical-diversity assumption; (iii) an explicit analysis of why the countermeasure degrades to uselessness when the diversity assumption is violated (common-mode faults on a single chip). We position the scheme against the countermeasure landscape and against the broken dual-modulus literature. The contribution is deliberately framed as a fault countermeasure with a provable detection guarantee, not as a computationally stronger RSA. We conclude with a concrete instantiation and a detailed measurement protocol.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Countermeasure, Adversary, Computer security, Scheme (mathematics), Computer science, Diversity (politics)

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange