The page been permanently moved to https://whibox.io/contests/2021/

You think you can obfuscate an ECDSA signature implementation and make its secret key hard to extract? You'd like to break white-box ECDSA candidates? This challenge is made for you!

The WhibOx contest, Edition 2021, is a white-box cryptography competition organized as one of the CHES 2021 challenges. The contest will take place from mid May to mid September 2021.

As previous editions, the competition challenges two categories of competitors:

  • Coders are invited to post candidate white-box implementations computing an ECDSA signature (on NIST P256 curve) from input message digest under a freely chosen secret key. The signature algorithm shall be deterministic with a freely chosen nonce derivation mechanism. Candidate implementations are expected to resist key extraction when submitted to white-box attackers.
  • Attackers are invited to break the submitted implementations i.e. extract their hard-coded signing key.

Contestants are free to remain anonymous. Coders are not expected to explain their designs, but only to provide a C source code of the white-box implementation. Attackers are not expected to explain their techniques, but only to recover embedded key(s).

The winners of the challenge will be awarded with fame and a 2000$ cash prize.

Important dates

Detailed Rules Release April 25, 2021
Submission Open May 17, 2021
Submission deadline August 22, 2021
Attack deadline September 11, 2021
Winners Announcement CHES 2021 rump session

Detailed rules of this edition will be released on April 25, 2021.

As soon as a challenge implementation is submitted and verified, it is made public on the server and can hence be freely downloaded and broken by contestants. Implementations can be submitted from May 17 to Aug 22, 2021. After the submission deadline, attackers still have 3 weeks to continue breaking challenge implementations (until the day before CHES 2021 starts).

Winners will be announced at the CHES 2021 rump session (CHES 2021 will be virtual conference from September 12 to 15).

Connect with the community

Stay tunned our official Twitter account @WhiboxC.

Join the discussion forum on Slack and get your questions answered by the organizing committee. Send us an invitation request at whibox.organizing.committee@gmail.com. You may also be invited by people that are already members.

The organizing committee is composed of Stefan Kölbl (Google), Louis Goubin, Pascal Paillier, Matthieu Rivain, Aleksei Udovenko, and Junwei Wang (CryptoExperts).

Credits

This competition is one of the challenges of CHES 2021, a conference sponsored by IACR.

Stefan Kölbl (Google) have gracefully volunteered to host and manage the submission server, which is sponsored by Google Cloud.

The source code of the submission server has been developed by CryptoExperts. It is fully open source and available on GitHub.