Source author record

Toshinori Suzuki

Toshinori Suzuki appears in the imported research catalog. Authorship, coauthor and topic links are available while profile ownership is still unclaimed.

ResearcherUnclaimed source record

Cryptography and Security Biological Physics cond-mat.soft physics.chem-ph

Catalog footprint

What is connected

3works

4topics

4close collaborators

Actions

Connect this record

Open graph Browse works

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.

preprint2020arXiv

Femtosecond X-ray emission study of the spin cross-over dynamics in haem proteins

In haemoglobin (consisting of four globular myoglobin-like subunits), the change from the low-spin (LS) hexacoordinated haem to the high spin (HS) pentacoordinated domed form upon ligand detachment and the reverse process upon ligand binding, represent the transition states that ultimately drive the respiratory function. Visible-ultraviolet light has long been used to mimic the ligand release from the haem by photodissociation, while its recombination was monitored using time-resolved infrared to ultraviolet spectroscopic tools. However, these are neither element- nor spin-sensitive. Here we investigate the transition state in the case of Myoglobin-NO (MbNO) using femtosecond Fe Kalpha and Kbeta non-resonant X-ray emission spectroscopy (XES) at an X-ray free-electron laser upon photolysis of the Fe-NO bond. We find that the photoinduced change from the LS (S = 1/2) MbNO to the HS (S = 2) deoxy-myoglobin (deoxyMb) haem occurs in ca. 800 fs, and that it proceeds via an intermediate (S = 1) spin state. The XES observables also show that upon NO recombination to deoxyMb, the return to the planar MbNO ground state is an electronic relaxation from HS to LS taking place in ca. 30 ps. Thus, the entire ligand dissociation-recombination cycle in MbNO is a spin cross-over followed by a reverse spin cross-over process.

preprint2016arXiv

Crashing Modulus Attack on Modular Squaring for Rabin Cryptosystem

The Rabin cryptosystem has been proposed protect the unique ID (UID) in radio-frequency identification tags. The Rabin cryptosystem is a type of lightweight public key system that is theoretetically quite secure; however it is vulnerable to several side-channel attacks. In this paper, a crashing modulus attack is presented as a new fault attack on modular squaring during Rabin encryption. This attack requires only one fault in the public key if its perturbed public key can be factored. Our simulation results indicate that the attack is more than 50\% successful with several faults in practical time. A complicated situation arises when reconstrucing the message, including the UID, from ciphertext, i.e., the message and the perturbed public key are not relatively prime. We present a complete and mathematically rigorous message reconstruction algorithm for such a case. Moreover, we propose an exact formula to obtain a number of candidate messages. We show that the number is not generally equal to a power of two.

preprint2014arXiv

Double Counting in $2^t$-ary RSA Precomputation Reveals the Secret Exponent

A new fault attack, double counting attack (DCA), on the precomputation of $2^t$-ary modular exponentiation for a classical RSA digital signature (i.e., RSA without the Chinese remainder theorem) is proposed. The $2^t$-ary method is the most popular and widely used algorithm to speed up the RSA signature process. Developers can realize the fastest signature process by choosing optimum $t$. For example, $t=6$ is optimum for a 1536-bit classical RSA implementation. The $2^t$-ary method requires precomputation to generate small exponentials of message. Conventional fault attack research has paid little attention to precomputation, even though precomputation could be a target of a fault attack. The proposed DCA induces faults in precomputation by using instruction skip technique, which is equivalent to replacing an instruction with a no operation in assembly language. This paper also presents a useful "position checker" tool to determine the position of the $2^t$-ary coefficients of the secret exponent from signatures based on faulted precomputations. The DCA is demonstrated to be an effective attack method for some widely used parameters. DCA can reconstruct an entire secret exponent using the position checker with $63(=2^6-1)$ faulted signatures in a short time for a 1536-bit RSA implementation using the $2^6$-ary method. The DCA process can be accelerated for a small public exponent (e.g., 65537). The the best of our knowledge, the proposed DCA is the first fault attack against classical RSA precomputation.