https://github.com/thomasleplus/subchannel

A study on subliminal channels in DSA algorithm.
https://github.com/thomasleplus/subchannel

crypto cryptography digital-signature digital-signatures dsa dsa-algorithm java jdk paper subchannel subliminal-channels

Last synced: about 1 month ago
JSON representation

A study on subliminal channels in DSA algorithm.

• Host: GitHub
• URL: https://github.com/thomasleplus/subchannel
• Owner: thomasleplus
• License: apache-2.0
• Created: 2016-03-18T14:54:18.000Z (over 8 years ago)
• Default Branch: main
• Last Pushed: 2024-09-26T10:48:20.000Z (about 2 months ago)
• Last Synced: 2024-09-30T14:05:01.157Z (about 2 months ago)
• Topics: crypto, cryptography, digital-signature, digital-signatures, dsa, dsa-algorithm, java, jdk, paper, subchannel, subliminal-channels
• Language: Java
• Size: 1.54 MB
• Stars: 6
• Watchers: 3
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE
  • Security: SECURITY.md

Awesome Lists containing this project

README

        
# SubChannel

[![Maven](https://github.com/thomasleplus/SubChannel/workflows/Maven/badge.svg)](https://github.com/thomasleplus/SubChannel/actions?query=workflow:"Maven")

[![CodeQL](https://github.com/thomasleplus/SubChannel/workflows/CodeQL/badge.svg)](https://github.com/thomasleplus/SubChannel/actions?query=workflow:"CodeQL")

THIS CODE IS EXPERIMENTAL AND WAS WRITTEN AS PART OF A RESEARCH

PROJECT FROM 2003. IT HAS NOT BEEN MAINTAINED OR TESTED SINCE SO THIS

CODE IS PROVIDED WITHOUT ANY WARRANTY OF ANY SORT.

As part of my exchange with the University of Montreal , I wrote, in collaboration with Pierre Turlan, a paper on subliminal channels (supervised by Stefan Wolf). Most of my work was focused on the DSA algorithm. The project includes a practical implemenation of subliminal channel in DSA.

The main idea of the project is to produce software capable of producing perfectly valid DSA signatures although in fact each signature reveals the signer's private key! This illustrates the necessitated use to open source cryptographic software because it makes no sense to trust a software simply because it seems to work correctly. It is necessary that the sources are checked to prevent mistakes as well as fraud.

For more information on this project, as well as the original paper in PDF, please see (in French):

https://www.leplus.org/projects/channel/