Security improvement for NTRU by using Error Analysis and Detection Procedures

Saudy, Naglaa F.; Shalash, Ahmed F.; Hassan, Abdel-karim S.O.

doi:10.21608/icmep.2014.29643

Security improvement for NTRU by using Error Analysis and Detection Procedures

Document Type : Original Article

Authors

¹ Phy. And Applied Math. Dept. Faculty of Engineering, Helwan University, Cairo,Egypt.

² Comm. Dept, Faculty of Engineering, Cairo University, Giza, Egypt.

³ Dept. of Eng. Math.& Physics, Faculty of Engineering, Cairo University, Giza, Egypt.

10.21608/icmep.2014.29643

Abstract

ABSTRACT
In this paper, fault detection scheme is introduced to improve the security and reliability of the NTRU in realistic environments, such as operating over a network. As the NTRU will be working in real networks, which have their own set of transient errors, handling such errors in analyzing the NTRU becomes a must. A single transient error occurring during the NTRU encryption (or decryption) process will likely result in a large number of errors in the encrypted/decrypted data. Such faults must be detected before sending data to avoid the transmission and use of erroneous data. Concurrent fault detection is important not only to protect the encryption/decryption process from random faults, but it will also protect the decryption circuitry from an attacker who may maliciously inject faults in order to find the secret key. We first describe the effects that faults may have on NTRU security while operating over a network by analyzing the propagation of such faults to the outputs. We then present two fault detection schemes: The first is a redundancy-based scheme while the second uses an error detection code. The latter present fault detection schemes by using an error detecting code, using one parity bit. We will add the parity bits to the polynomials and disable the device output when any of these parity checks are violated. This fault detection scheme has more than 99% coverage fault detection in the encryption process and in the first part in the decryption process. In the second part in the decryptionprocess, it has more than 67 % coverage fault detection. We can increase this ratio to high fault detection by adjusting the choices of the parameters of the NTRU network security system.