This is part of a small university project to evaluate possible mitigations against fault attacks on deterministic signature schemes. The attacks we simulate are explained in the following paper:

Attacking Deterministic Signature Schemes Using Fault Attacks (EusoSP '18): https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8406609&tag=1

Build Instructions

Clone Repo

git clone --recurse-submodules https://github.com/mastercaution/det-sign-fault-sim.git

Patch OpenSSL

1. Patch OpenSSL source files for the simulator:

   git -C openssl apply ../ossl_ed25519_rowhammer_sim.patch
   

2. Build OpenSSL with sim activated:

   make openssl
   

CAUTION: This is now a modified version of OpenSSL! Do not install it anywhere and only use is for this simulator!

Build attacks

It's simply

make

Attack Information

OSSL Ed25519 Attack (ossl_ed25519_attack)

This is a simulated fault attack on OpenSSL Ed25519 signing, which forces the signing algorithm to use a nonce twice for different messages. It recovers the secret parameter a to be able to create forged signatures.

Usage: ossl_ed25519_attack [OPTION...]

 Faults:
  -F, --fault[=FAULT]        Choose what parameter(s) to fault:
                             "M", "R", "A", "none"
                             (not specifying -F is equivalent to "-FM")

 Mitigations:
      --mit-check            Check integrity of parameters during signature
                             generation
      --mit-rand             Add randomness to nonce

 Output:
  -p, --no-color             Produce plain output without colors
  -v, --verbose              Produce verbose output

  -?, --help                 Give this help list
      --usage                Give a short usage message
  -V, --version              Print program version

Examples

• Enable verbose output and fault parameters R and M:

  ./ossl_ed25519_attack -v -FRM
  

• Activate additional randomness in nonce generation and run fault attack on the message, which is the default if "-F" not specified:

  ./ossl_ed25519_attack --mit-rand