[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-297045-105":59,"doc-detail-297045-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","elgamal-breaking-smart-card-based-elgamal-signature-and-its-variants-attack-model","ElGamal - Breaking Smart Card Based ElGamal Signature and Its Variants - Attack Model","","The slides analyze how smart-card tamperproof hardware faults can be exploited to compromise cryptographic secret keys, focusing on breaking smart card based ElGamal signatures and their variants. They outline an attacker model that introduces physical faults such as heat, laser, pressure, or radiation, then explains resulting exposure of secrets including DES/RSA keys and authentication data. Mathematical signing components for ElGamal are presented along with an attack idea that predicts the signature generation randomness by manipulating PRG behavior.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/elgamal-breaking-smart-card-based-elgamal-signature-and-its-variants-attack-model/297045/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/elgamal-breaking-smart-card-based-elgamal-signature-and-its-variants-attack-model/297045.png","ImageObject",300,407,{"name":92,"@type":93},"Alex Sinclair","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-20","2026-09-18",true,{"@type":102,"interactionType":103,"userInteractionCount":52},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"How can an attacker introduce faults into a smart card?","Question",{"text":112,"@type":113},"The attacker uses physical effects such as heat, laser, pressure, or radiation to compromise tamperproof hardware inside the smart card.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"Which secret information can the fault attack compromise?",{"text":117,"@type":113},"The slides indicate compromise of secret encryption/signature keys (e.g., DES or RSA key material) and certain authentication/identification cards.",{"name":119,"@type":110,"acceptedAnswer":120},"How does the attack idea help an attacker find x_a in ElGamal signatures?",{"text":121,"@type":113},"By making the PRG “random” number predictable through falsification of hardware, suppressing internal seed or PRG outputs so the randomness used in signature generation becomes constrained.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},297045,1790177427,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":52,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145},1099523882182,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","ElGamal  \nSignature  \nCard  \nBreaking Smart Card Based ElGamal Signature and Its Variants  \nAsiacrypt96 Rump Session, 5 Nov. 1996  \nYuliang Zheng Monash University  \nTsutomu Matsumoto  \nYokohama Nat. University  \n© Yuliang Zheng, 1996 1  \nExploiting hardware faults  \nn Secret key algorithms  \n􀀀 DES, IDEA, FEAL, etc- - -broken by Biham & Shamir (18 Oct. & 30 Oct.)  \n􀀀 (see also J-J Quisquater, 23 Oct.) n Public key signature  \n􀀀 RSA- - -broken by  \nlBellcore (25 Sept., no details were published)  \nlNat. Uni. of Singapore (23 Oct.)  \n􀀀 ElGamal family-- ???  \n© Yuliang Zheng, 1996  \n2  \nCompleting the big picture  \nn We show how to break smart card based  \n􀀀 ElGamal signature and  \n􀀀 all its variants, by (temporally) falsifying part of the circuitry in the smart card  \nn Time: 31 Oct. 1996  \n© Yuliang Zheng, 1996 3  \nThe Attack Model  \nnAn attacker, who is in possession of a target smart card,  \nmay introduce faults into tamperproof hardware in the smart card,  \nsay by exposing it to certain physical effects (heat, laser, pressure, radiation, etc)  \n© Yuliang Zheng, 1996 4  \nThe Attack Model (cnt’d)  \nn The attack may then compromise a secret in the smart card.  \n􀀀 a DES encryption / decryption key  \n􀀀 a RSA signature-generation / decryption key  \n􀀀 certain authentication / identification cards  \n􀀀 …...  \n© Yuliang Zheng, 1996 5  \nElGamal Signature  \nn Alice’s keys  \n􀀀 xa ---secret key for signature generation  \n􀀀 ya = gx a modp - - -public key n Alice’s signature on a message m  \nis a pair of number (r,s):  \n􀀀 x ∈R [1,…, p − 1] r = gx mod p  \n􀀀 s = hash~~ ~~(~~ ~~mx)~~ ~~−~~ ~~xa~~ ~~⋅~~ ~~r~~ ~~ mod(p − 1)  \n© Yuliang Zheng, 1996 6  \nIdea for finding xa  \nnAn attacker may figure out xa by making the “random” number x predictable, through the  \nfalsification of part of the hardware  \n􀀀 software pseudo-random number generator- - -suppressing the contents of the status register that stores the current “seed” number  \n􀀀 hard pseudo-random number generator- - -suppressing its output  \n© Yuliang Zheng, 1996 7  \nTwo possibilities  \nn software pseudo-random number generator  \n􀀀 suppressing the contents of the status register that stores the current  \n“seed” number  \nnhard pseudo-random number generator  \n􀀀 suppressing its output  \n© Yuliang Zheng, 1996 8  \nWhen software PRG is used  \nm  \nr,s  \n© Yuliang Zheng, 1996 9  \nMain idea  \nn suppress the contents of the status register that stores the current seed for the PRG  \nn so that only a fixed number, such as the all-1 value, is (temporarily) available to the CPU  \nn collect the output (r,s ) of the smart card  \n© Yuliang Zheng, 1996 10","cbCaioadm3SAWwRH","https://ap.wps.com/l/cbCaioadm3SAWwRH","pdf",234338,21,"English","# ElGamal Signature\n## Signature structure and related keys\n## Exploiting hardware faults\n## The Attack Model\n## Idea for finding x_a via PRG manipulation\n## Main idea for collecting (r,s) output","[{\"question\":\"How can an attacker introduce faults into a smart card?\",\"answer\":\"The attacker uses physical effects such as heat, laser, pressure, or radiation to compromise tamperproof hardware inside the smart card.\"},{\"question\":\"Which secret information can the fault attack compromise?\",\"answer\":\"The slides indicate compromise of secret encryption/signature keys (e.g., DES or RSA key material) and certain authentication/identification cards.\"},{\"question\":\"How does the attack idea help an attacker find x_a in ElGamal signatures?\",\"answer\":\"By making the PRG “random” number predictable through falsification of hardware, suppressing internal seed or PRG outputs so the randomness used in signature generation becomes constrained.\"}]","ElGamal - Breaking Smart Card Based ElGamal Signature and Its Variants - Attack Model | PDF",1789739921,53]