REASSURE (H2020 731591) ECC Dataset

Datasets collection for ECC (C25519) side-channel traces, as part of REASSURE H2020 731591 project. The set “REASSURE_c25519_arithm_6k + PatternExtract From 5997 traces + StaticAlign.trs” contains electromagnetic traces coming from 5997 executions of Curve25519 $\mu$NaCl Montgomery Ladder scalar multiplication:<br> http://munacl.cryptojedi.org/curve25519-cortexm0.shtml<br> running on the Pi\~{n}ata target:<br> https://www.riscure.com/product/pinata-training-target/<br> which is a 32-bit STM32F4 microcontroller with an ARM-based architecture, running at the clock frequency of 168 MHz.<br> <br> The implementation employs arithmetic-based conditional swap and is additionally protected with projective coordinate re-randomization and scalar randomization.<br> Each trace from the dataset represent a single iteration of the Montgomery Ladder scalar multiplication that is cut from the whole execution trace; such trace is labeled with the corresponding cswap condition bit.<br> Observe that a full scalar can be trivially recovered from the cswap condition bits used in the 255 Montgomery Ladder iterations.<br> Furthermore, all these cut traces (5997*255=1529235) are aligned to exploit the leakage efficiently.<br> Details about the implementation and how the traces are aligned are in:<br> https://eprint.iacr.org/2016/923.pdf<br> <br> The set “REASSURE_c25519_arithm_6k + PatternExtract From 100 traces + StaticAlign.trs” contains a part of the 5997 set, but limited to the first 100 full traces.<br> <br> The set “REASSURE_c25519_arithm_6k_100 full traces.trs” contains the full 100 traces (before division).<br> <br> Each traces is in the TRS format that is described under the following links:<br> https://github.com/Riscure/python-trsfile<br> https://github.com/Riscure/java-trsfile<br> https://github.com/Riscure/Jlsca<br> <br> Moreover, note that each trs file include a short description inside the file itself.