REASSURE (H2020 731591) ECC Dataset

Datasets collection for ECC (C25519) side-channel traces, as part of REASSURE H2020 731591 project.

The set “REASSURE_c25519_arithm_6k + PatternExtract From 5997 traces + StaticAlign.trs” contains electromagnetic traces coming from 5997 executions of Curve25519 $\mu$NaCl Montgomery Ladder scalar multiplication:
http://munacl.cryptojedi.org/curve25519-cortexm0.shtml
running on the Pi\~{n}ata target:
https://www.riscure.com/product/pinata-training-target/
which is a 32-bit STM32F4 microcontroller with an ARM-based architecture, running at the clock frequency of 168 MHz.

The implementation employs arithmetic-based conditional swap and is additionally protected with projective coordinate re-randomization and scalar randomization.
Each trace from the dataset represent a single iteration of the Montgomery Ladder scalar multiplication that is cut from the whole execution trace; such trace is labeled with the corresponding cswap condition bit.
Observe that a full scalar can be trivially recovered from the cswap condition bits used in the 255 Montgomery Ladder iterations.
Furthermore, all these cut traces (5997*255=1529235) are aligned to exploit the leakage efficiently.
Details about the implementation and how the traces are aligned are in:
https://eprint.iacr.org/2016/923.pdf

The set “REASSURE_c25519_arithm_6k + PatternExtract From 100 traces + StaticAlign.trs” contains a part of the 5997 set, but limited to the first 100 full traces.

The set “REASSURE_c25519_arithm_6k_100 full traces.trs” contains the full 100 traces (before division).

Each traces is in the TRS format that is described under the following links:
https://github.com/Riscure/python-trsfile
https://github.com/Riscure/java-trsfile
https://github.com/Riscure/Jlsca

Moreover, note that each trs file include a short description inside the file itself.