{"action":"created","issue":{"url":"https://api.github.com/repos/OpenWhiteBox/AES/issues/4","repository_url":"https://api.github.com/repos/OpenWhiteBox/AES","labels_url":"https://api.github.com/repos/OpenWhiteBox/AES/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/OpenWhiteBox/AES/issues/4/comments","events_url":"https://api.github.com/repos/OpenWhiteBox/AES/issues/4/events","html_url":"https://github.com/OpenWhiteBox/AES/issues/4","id":223075017,"number":4,"title":"Full algorithm security dynamic binary analysis","user":{"login":"kaoh","id":860242,"avatar_url":"https://avatars1.githubusercontent.com/u/860242?v=3","gravatar_id":"","url":"https://api.github.com/users/kaoh","html_url":"https://github.com/kaoh","followers_url":"https://api.github.com/users/kaoh/followers","following_url":"https://api.github.com/users/kaoh/following{/other_user}","gists_url":"https://api.github.com/users/kaoh/gists{/gist_id}","starred_url":"https://api.github.com/users/kaoh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaoh/subscriptions","organizations_url":"https://api.github.com/users/kaoh/orgs","repos_url":"https://api.github.com/users/kaoh/repos","events_url":"https://api.github.com/users/kaoh/events{/privacy}","received_events_url":"https://api.github.com/users/kaoh/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-04-20T13:53:28Z","updated_at":"2017-04-20T21:07:02Z","closed_at":"2017-04-20T17:10:37Z","body":"Was the \"full\" version designed to be resistent against dynamic binary analysis? https://eprint.iacr.org/2015/753.pdf"},"comment":{"url":"https://api.github.com/repos/OpenWhiteBox/AES/issues/comments/295913495","html_url":"https://github.com/OpenWhiteBox/AES/issues/4#issuecomment-295913495","issue_url":"https://api.github.com/repos/OpenWhiteBox/AES/issues/4","id":295913495,"user":{"login":"kaoh","id":860242,"avatar_url":"https://avatars1.githubusercontent.com/u/860242?v=3","gravatar_id":"","url":"https://api.github.com/users/kaoh","html_url":"https://github.com/kaoh","followers_url":"https://api.github.com/users/kaoh/followers","following_url":"https://api.github.com/users/kaoh/following{/other_user}","gists_url":"https://api.github.com/users/kaoh/gists{/gist_id}","starred_url":"https://api.github.com/users/kaoh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaoh/subscriptions","organizations_url":"https://api.github.com/users/kaoh/orgs","repos_url":"https://api.github.com/users/kaoh/repos","events_url":"https://api.github.com/users/kaoh/events{/privacy}","received_events_url":"https://api.github.com/users/kaoh/received_events","type":"User","site_admin":false},"created_at":"2017-04-20T21:07:02Z","updated_at":"2017-04-20T21:07:02Z","body":"Sure? The paper states: \r\n\r\n> This approach allows\r\n> one to extract the secret key material from white-box implementations significantly faster and\r\n> without specific knowledge of the white-box design in an automated manner\r\n\r\nI.e. it is using a similar technique like the differential power analysis. Mentioned counter measures are:\r\n\r\n> As a potential countermeasure against DCA, the embedded\r\n> (and possibly merged with other functionality) static random data is used to select which\r\n> affine equivalence is used for the encoding when accessing a particular look-up table. This results\r\n> in a variable encoding (at run-time) instead of using a fixed encoding. Such an approach\r\n> can be seen as a form of masking as used to thwart classical first-order DPA.\r\n\r\nSo, does the scheme use some randomized approach here?"}}
{"actor":{"display_login":"kaoh"}}