The WhibOx contest is back for a 4th edition, continuing the last edition's focus on public-key white-box cryptography.

You think you can obfuscate an ECDSA signature implementation and make its secret key hard to extract? You'd like to break white-box ECDSA candidates? This challenge is made for you!

The WhibOx contest, Edition 2024, is a white-box cryptography competition organized as one of the CHES 2024 challenges. The contest will take place from late May to early September 2024.

As previous editions, the competition challenges two categories of competitors:

  • Coders are invited to post candidate white-box implementations computing an ECDSA signature (on the NIST P256 curve) from input message digest under a freely chosen secret key. The signature algorithm can be non-deterministic or deterministic with a freely chosen nonce derivation mechanism. Candidate implementations are expected to resist key extraction when submitted to white-box attackers.
  • Attackers are invited to break the submitted implementations i.e. extract their hard-coded signing key.

Contestants are free to remain anonymous. Coders are not expected to explain their designs, but only to provide a C source code of the white-box implementation. Attackers are not expected to explain their techniques, but only to recover embedded key(s).

The winners of the challenge will be awarded with fame and a total of 2000$ cash prizes.


Challenge schedule (tentative)

Submission Open May 26, 2024 @ 23:59 AoE
Submission deadline August 8, 2024 @ 23:59 AoE
Attack deadline September 1, 2024 @ 23:59 AoE
Winners Announcement CHES 2024 rump session (September 4-7, 2024)

As soon as a challenge implementation is submitted and verified, it is made public on the server and can hence be freely downloaded and broken by contestants. Implementations can be submitted from May 26 to Aug 8, 2024. After the submission deadline, attackers still have more than 3 weeks to continue breaking challenge implementations (until two days before CHES 2024 starts).

Winners will be announced at the CHES 2024 rump session.


Challenge rules

The detailed rules of the challenge can be found on this page.


Connect with the community

Stay tunned our official Twitter account @WhiboxC.

Join the discussion forum on Slack and get your questions answered by the organizing committee. Send us an invitation request at whibox.organizing.committee@gmail.com. You may also be invited by people that are already members.

The organizing committee is composed of Louis Goubin (UVSQ), Ryad Benadjila, Pascal Paillier, Matthieu Rivain (CryptoExperts), Alex Biryukov, Aleksei Udovenko (University of Luxembourg), and Junwei Wang.


Credits

This competition is one of the challenges of CHES 2024, a conference sponsored by IACR.

The source code of the submission server has been developed by CryptoExperts. It is fully open source and available on GitHub. The server of this edition is administrated and maintained by CryptoExperts.

Credits go to Ryad Benadjila for re-developing parts of the server at the occasion of this fourth edition of the WhibOx contest; the previous versions were created and upgraded by Thomas Baignères, Matthieu Finiasz and Junwei Wang.