Improved High-Order Conversion From Boolean to Arithmetic Masking

  • Luk Bettale IDEMIA, France
  • Jean-Sébastien Coron University of Luxembourg
  • Rina Zeitoun IDEMIA, France
Keywords: Side-channel countermeasure, high-order masking, Boolean to arithmetic conversion, ISW security proof


Masking is a very common countermeasure against side channel attacks. When combining Boolean and arithmetic masking, one must be able to convert between the two types of masking, and the conversion algorithm itself must be secure against side-channel attacks. An efficient high-order Boolean to arithmetic conversion scheme was recently described at CHES 2017, with complexity independent of the register size. In this paper we describe a simplified variant with fewer mask refreshing, and still with a proof of security in the ISW probing model. In practical implementations, our variant is roughly 25% faster.

How to Cite
Bettale, L., Coron, J.-S., & Zeitoun, R. (2018). Improved High-Order Conversion From Boolean to Arithmetic Masking. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(2), 22-45.