REASSURE (H2020 731591) ECC Dataset

<p>Datasets collection for ECC (C25519) side-channel traces, as part of REASSURE H2020 731591 project.</p> <p>The set &ldquo;REASSURE_c25519_arithm_6k + PatternExtract From 5997 traces + StaticAlign.trs&rdquo; contains electromagnetic traces coming from 5997 executions of Curve25519 $\mu$NaCl Montgomery Ladder scalar multiplication:<br> <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmunacl.cryptojedi.org%2Fcurve25519-cortexm0.shtml&amp;data=02%7C01%7Cdavide.bellizia%40uclouvain.be%7C8c9e51578a42428bd87008d80c926b2f%7C7ab090d4fa2e4ecfbc7c4127b4d582ec%7C0%7C0%7C637273171350333478&amp;sdata=m8uJEnfiU%2BAw7s%2Bt%2BKX%2Fgf8RcJM849UH2p2%2B%2FGHJtOs%3D&amp;reserved=0">http://munacl.cryptojedi.org/curve25519-cortexm0.shtml</a><br> running on the Pi\~{n}ata target:<br> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.riscure.com%2Fproduct%2Fpinata-training-target%2F&amp;data=02%7C01%7Cdavide.bellizia%40uclouvain.be%7C8c9e51578a42428bd87008d80c926b2f%7C7ab090d4fa2e4ecfbc7c4127b4d582ec%7C0%7C0%7C637273171350333478&amp;sdata=39fNqShJ8l5BoZ4HMtHLgviylORABJyq4Ri1wOQGpOI%3D&amp;reserved=0">https://www.riscure.com/product/pinata-training-target/</a><br> which is a 32-bit STM32F4 microcontroller with an ARM-based architecture, running at the clock frequency of 168 MHz.<br> <br> The implementation employs arithmetic-based conditional swap and is additionally protected with projective coordinate re-randomization and scalar randomization.<br> Each trace from the dataset represent a single iteration of the Montgomery Ladder scalar multiplication that is cut from the whole execution trace; such trace is labeled with the corresponding cswap condition bit.<br> Observe that a full scalar can be trivially recovered from the cswap condition bits used in the 255 Montgomery Ladder iterations.<br> Furthermore, all these cut traces (5997*255=1529235) are aligned to exploit the leakage efficiently.<br> Details about the implementation and how the traces are aligned are in:<br> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feprint.iacr.org%2F2016%2F923.pdf&amp;data=02%7C01%7Cdavide.bellizia%40uclouvain.be%7C8c9e51578a42428bd87008d80c926b2f%7C7ab090d4fa2e4ecfbc7c4127b4d582ec%7C0%7C0%7C637273171350343476&amp;sdata=i3GZpv26FuYFwvOSxGjtXm2EU%2Be5xy5XCHEw%2BkrDuKE%3D&amp;reserved=0">https://eprint.iacr.org/2016/923.pdf</a><br> <br> The set &ldquo;REASSURE_c25519_arithm_6k + PatternExtract From 100 traces + StaticAlign.trs&rdquo; contains a part of the 5997 set, but limited to the first 100 full traces.<br> <br> The set &ldquo;REASSURE_c25519_arithm_6k_100 full traces.trs&rdquo; contains the full 100 traces (before division).<br> <br> Each traces is in the TRS format that is described under the following links:<br> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FRiscure%2Fpython-trsfile&amp;data=02%7C01%7Cdavide.bellizia%40uclouvain.be%7C8c9e51578a42428bd87008d80c926b2f%7C7ab090d4fa2e4ecfbc7c4127b4d582ec%7C0%7C0%7C637273171350343476&amp;sdata=v78Tofs4%2BWvvSYhtqF7dW2uaU1nanllTXA5RyGshjWU%3D&amp;reserved=0">https://github.com/Riscure/python-trsfile</a><br> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FRiscure%2Fjava-trsfile&amp;data=02%7C01%7Cdavide.bellizia%40uclouvain.be%7C8c9e51578a42428bd87008d80c926b2f%7C7ab090d4fa2e4ecfbc7c4127b4d582ec%7C0%7C0%7C637273171350353467&amp;sdata=Nw%2FAamSU1RQaoCeIC80786IKn4f%2BuOl7wfyjNk5R1C4%3D&amp;reserved=0">https://github.com/Riscure/java-trsfile</a><br> <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FRiscure%2FJlsca&amp;data=02%7C01%7Cdavide.bellizia%40uclouvain.be%7C8c9e51578a42428bd87008d80c926b2f%7C7ab090d4fa2e4ecfbc7c4127b4d582ec%7C0%7C0%7C637273171350353467&amp;sdata=sVPz0gh96ivEqMNxUNN4C36RV9ulAE%2BOu5DQ0w44Pic%3D&amp;reserved=0">https://github.com/Riscure/Jlsca</a><br> <br> Moreover, note that each trs file include a short description inside the file itself.</p>