Datasets collection for ECC (C25519) side-channel traces, as part of REASSURE H2020 731591 project. The set “REASSURE_c25519_arithm_6k + PatternExtract From 5997 traces + StaticAlign.trs” contains electromagnetic traces coming from 5997 executions of Curve25519 $\mu$NaCl Montgomery Ladder scalar multiplication: http://munacl.cryptojedi.org/curve25519-cortexm0.shtml running on the Pi\~{n}ata target: https://www.riscure.com/product/pinata-training-target/ which is a 32-bit STM32F4 microcontroller with an ARM-based architecture, running at the clock frequency of 168 MHz. The implementation employs arithmetic-based conditional swap and is additionally protected with projective coordinate re-randomization and scalar randomization. Each trace from the dataset represent a single iteration of the Montgomery Ladder scalar multiplication that is cut from the whole execution trace; such trace is labeled with the corresponding cswap condition bit. Observe that a full scalar can be trivially recovered from the cswap condition bits used in the 255 Montgomery Ladder iterations. Furthermore, all these cut traces (5997*255=1529235) are aligned to exploit the leakage efficiently. Details about the implementation and how the traces are aligned are in: https://eprint.iacr.org/2016/923.pdf The set “REASSURE_c25519_arithm_6k + PatternExtract From 100 traces + StaticAlign.trs” contains a part of the 5997 set, but limited to the first 100 full traces. The set “REASSURE_c25519_arithm_6k_100 full traces.trs” contains the full 100 traces (before division). Each traces is in the TRS format that is described under the following links: https://github.com/Riscure/python-trsfile https://github.com/Riscure/java-trsfile https://github.com/Riscure/Jlsca Moreover, note that each trs file include a short description inside the file itself.

Contact: chmielewski@riscure.com