knarfrank/higher-order-masked-aes-128

Higher-order Masking of AES-128 based on the Rivain and Prouff method, CPRR method and Common Shares with Random Reduction method.

higher-order-masked-aes-128's Issues

Where do 3 s-box like arrays (fifth, snd and l_affine_snd) come from, please?

I searched some papers, but can't find anything. They are not like original AES s-box, could you please tell me where they come from?

Right to reuse?

For my side-channel research I would like to demonstration TVLA on this code. This repository does not seem to include any licensing terms.

Could you specify which terms you would like? Do I have to cite "Provably Secure Higher Order Masking of AES" with a link to this repository?

The last share in "SecEval"/"SecEvalTwoQuadraticRand" unmanaged when NUM_SHARES is odd

According to the Alg 8 in "Fast evaluation of Sboxes via Common Shares", all shares should pass table "h" first, before any other computation. If NUM_SHARES=2d+1, both "SecEval" and "SecEvalTwoQuadraticRand" perform the table look-ups for i=0 to d-1 and d to 2d-1, where the last share 2d is left without table look-up. This would not be an issue if NUM_SHARES is an even number, say 2, 4 or 6.