Hey, stampers. Welcome to another week of Watch It Weekly Wednesday. I'm Aubrey, part of the Stampin' Jill creative team, and today I'm excited to share with you the Playful Alphabet dies.  They are the perfect basic font that you can use on just about any card, whether it's a holiday type card, whether it's a thank you or a thinking of you or whatever it may be. These are so much fun and you can use them with anything to get the saying or the sentiment that you want. So I wanted to show you a few cards that I've come up with using the Playful Alphabet dies. And then I wanted to show you a technique that you can use with them. So these are some of the cards that we've come up with using this. These are really fun. This one is a little gift card holder here. You can see it opens there and then you can put a gift card right here in the cello. So cute. And then this is a shaker card. It says miss you. So fun. And then this one says thanks. I love these cards. And on all three of them, you can see we have cut out the letters and then popped them up so they're a little bit dimensionalized. We use the foam adhesive sheets in order to do that. Those are so great. And you can cut any image out with the foam adhesive sheets using our dies, but they're really especially great for these Playful Alphabet dies so that you can kind of pop up your sentiment. But I wanna show a different way to use them as well that I don't think we always think about because those foam adhesive sheets are so great.  So I'm going to use the sentiment happy birthday and I'm going to take all of my letters over to the right side of my paper. I'll show you what I mean by that. So I'm gonna have it say happy birthday, just like that. Now, there are some of the letters in the Playful Alphabet that are double, like you, for example, you have two A's, we have two E's, two S's, the letters that we use quite a bit, but some of them you don't. So I can't run all of the letters through in one go. I need to do it in two. So let me show you what I mean by that. We're gonna start with happy and we're just going to orient it over here on the right side of the paper, but I only have one P. So I'm just gonna go as far as PY in happy, just like that. And then I'm gonna go down to my next word, which I'm gonna have birth right here. So that ends with an H. I'm gonna put H, T, R, I, and B. And I can spell that whole word out.  So let me grab my other plate here, put that on top, and then we're going to run that through on the Stampin' Cut and Emboss machine, just like that. Okay, and then I'm gonna move all of those letters off, take all of my dies. Okay, and now I'm just gonna finish off my words. So I need a P again, and A and H, and then we're gonna spell day down here. So Y and my second A and D, just like that. Grab my other plate, run that through. Okay, so there, take all of this off. And the best part of this is now you have all of the letters that say happy birthday. So you can do this card, and then you can take all of those letters and make another card out of the letters you just punched. So let me show you, I'm gonna put some DSP behind this. Isn't that so cute? You're kind of just taking that negative of the dies of the letters and getting it a totally different look. So let me show you the card that I made that looks like this. So here it is. We just put it all together, popped up some cute little balloons. Super simple and so cute. So you can see the difference here. This is using that negative space and this is popping them up with those foam adhesive sheets. Both are so cute, but just a different look. I love that. So let me bring in a few more cards that we've made and received using this set just so you can get a few more ideas. Here's one. I love this strip looking card. Hello, so cute. And this one, hi. That's again, using that negative area. This one, thanks. You made that fun fold there. And here's another shaker card. Happy birthday. And that's using that same look. We just put shaker stuff behind it. So super cute. I've had so much fun playing with these playful alphabet dyes. I love them. I think they'll be around for a long time to come. And they're the perfect addition to your crafting supplies. I hope you enjoyed our video this week. If you have any questions, make sure to email us at sudemonstrator at gmail.com. And if you liked the video, make sure you give us a thumbs up. Thanks so much. We'll see you next week for another Watch It Weekly Wednesday.


Let's start with masking. So the first paper is titled formal verification of masked hardware implementations in the presence of glitches by Roderick Blum, Hannes Gross, Renat Isupov, Bettina Kuninghofer, Stefan Mangard and Johannes Winter, and Hannes would give a talk. Okay, thank you for the introduction. So before I'm going to start this talk with a brief summary about what we actually achieved in this work, I want to start with the vision that we had in mind when we started working towards this topic. So that idea really was to create a formal tool or a formal method that would take a masked circuit as an input and would then tell us whether it's securely masked or not. And if it's not securely masked, we want this formal tool to tell us where things went wrong and why this happened. So what have we achieved so far? With our formal verification approach, we can verify glitchy circuits and I just say glitchy because I'm really referring to hardware implementations and not just to a graphic way of expressing Boolean formulas. Our approach doesn't require any intermediate modeling steps, for example, to re-implement this in software but works directly on the net list and it can be applied at different design stages. So when you first start to implement your hardware designs, we can already put the first modules in our tool and then it will tell you whether it's securely masked or not. But it can also be applied later on if you move towards the end of the line in the digital design flow. So when you have the back in the data net list and so on. It also works for higher order and for multivariate analysis. It is not tailored to a specific masking scheme so it works with every Boolean masking scheme. And it allows you, and this is really helpful to localize where your flaw is. And first, and most importantly, it gives a conclusive security state. And so the contents of the paper are the formal groundwork, but we also give a concrete SMD-based instantiation of our formal approach and test it against some real practical examples. These examples include, for example, the DOM multipliers, the domainoid masking multipliers, up to order 4, but also bigger circuits like the catcher S-Box up to order 3. And this is the biggest example we have of first order protected AES S-Box that we test against. So let's start at the beginning. Why do we actually need formal verification or verification of masked hardware implementations? Aren't there supposed to be any secure masking schemes? So first of all, we need to talk about what is the secure masking scheme. And we have a very nice way to express side channel resistance, which is covered by this probing model which goes back to the private circuit's paper of Isha et al.  If it is secure against the probing test, it has the ability to place up to deep probing needles on your circuit. And if the attacker cannot extract any secrets, then it's secure in this probing model. And so what is a masking scheme? A masking scheme is in some way a projection of these rules set by these probing models on the canvas of a masked implementation. So it gives you the rules, but the masking scheme itself is implemented by designers of hardware, so there can be mistakes in the implementation of these schemes and also the digital design flow that takes this circuit as an input and processes it further and then it can be produced in both many tasks that change your netlist and also things can go wrong there. So we have, for example, masking schemes that look at this from a classical masking perspective or a more modern way is from the sharing perspective, but in the end this is always a managed process to mapping these schemes to the implementations. So implementation requires verification. And at least in theory there are two approaches one can think of. The first approach to verify this mask circuit is to either use empirical verification which is the predominant form in this widely used practice, but there's also a formal way of proving this. And so the empirical verification works as follows. So you take, for example, your supposedly secure AES core, you plug in the oscilloscope data into the power line and extract sidereal information and then you run some statistical analysis on the power traces that will tell you whether it passes the test or fails. The problem with this approach is that it's not conclusive. So if you don't find a flaw, you just don't know, maybe you haven't used enough traces to test your implementation. And if a flaw is detected, you don't know if it's a real flaw and where it actually originates from. So it could be everywhere from the circuit. It's also device-specific and it can hardly be used during the design phase of your circuit. So how about formal verification? Well, I thought the picture would say more than a thousand words. So in terms of formal verification, in terms of practice of formal verification and masked hardware implementations, there's really not much there. So if you would look at the software side, this would look a bit differently. But yeah, so in the hardware side, at least when you started, there was really not much there. So and with this set, I should also talk a bit about what we don't do or what we try to avoid in this, in our formal approach. So what we didn't want to do is a heuristical approach. So testing, for example, specific properties for a certain masking scheme. This would be, again, not conclusive, of course, informally. What has become very much popular, especially in the software world, is this notion of composability, which allows you to verify smaller parts of the circuit inside this composability notion. And this will then tell you if all of the parts are secure and to plug them together, then in the entire whole circuit will be secure. So we didn't do this because not all circuits or almost implementations fulfill this composability notion in a straightforward way. But this would be one meaningful extension to our approach. And as a matter of fact, so we're living in a really fast-moving world. So there's already a paper on this. So there's this paper on composable masking schemes in the presence of physical defaults by Faust et al. that does something very similar to our approach for this composability notion. So in our set about what we don't do, what is it that we actually do? So we started with this project about two years ago and for a long time we were really struggling to find something that really works. So we found some approaches that looked very promising for first order and didn't vary at the tax, but everything fails for higher order. So at some point we became really desperate until we remembered the roots of our information in computers engineering education. And so I think every student that studies something like this has heard something like, if you're really desperate if nothing works then just go for Fourier analysis. And so this is what we tried. So the interesting question is now, what is the Fourier analysis of the circuit? And so when we neglect time and look at the circuit and I also want to use the slide to introduce the notation I'm going to use in the rest of this presentation. So I always assume that we have a secret that is masked inside this variable SM that is masked by the mask MS. Then we have some other masks that are denoted with M variables and then we have some variables that are interesting or publicly known or something else, something that is not security relevant but also cannot provide security like a mask could do. And these are these public variables or B variables here. So when we look at this circuit and when we are neglecting time then we can just write this as a bolding equation. So this says nothing about time and behavior but just for the moment. So the next thing I'm going to talk about is this Fourier expansion and for those of you who were to talk about on-control yesterday already heard about this, this is also called the Worsh Transform. And the way this works is basically we take this bolding equation and wrap true to minus 1, false to 1 and then we can write each equation in a very elegant form so we can write a function over the input variables X as the sum of the Fourier coefficients times the Fourier characters and this Fourier characters are nothing else than all combinations or possible ordered combinations of variables that we have. So how would this look like? So we would end up with an equation that looks something like this. So this alpha here are my coefficients and then I add them up together times all combinations of my input variables X here. So how does this help? Well, there is this lemma of giant message that basically tells us a bolding function is statistically independent. For all variables it holds that the subset of this set of variables despite the empty set, although the Fourier coefficients should be zero. So what does this mean for our circuit? So if we set SM here, the equation S times MS. So S is our secret that we want to protect. So when we look at the Fourier transformation of this circuit then we see that we only have non-zero coefficients for terms where we have S joined with a mask together. So this would be insecure if we would have an S alone here or an S with a politically known variable but so far the circuit looks secure from our perspective. What's the problem with this? So if you go to bigger circuits and later on we're going to expand this to all possible signal timings then this really becomes quite inefficient and if it becomes big enough then it gets impossible to do this. So instead of calculating the exact Fourier spectrum our idea was to just do an approximation of this spectrum because we just want to know whether a certain value is a zero or not. So with our approach we're doing an approximation and this can also come up with some low spikes here which only can decrease our security so we can come up with false alarms but if a circuit is securely masked and we do this approach then I should always say it's secure, this is what we prove. And so the verification then works in three steps. The first step is that we label our inputs according to our Fourier analysis so this basically means that we just set the input labels here according to our variables except for the SM here which is S joined with MS then we propagate these labels according to some rules which depend on the Fourier spectrum of the functions that we're calculating and then we check for some secrets without any masks in this case it would be a secure circuit. So this propagation rules that we have are quite simple for a stable signal so when we don't talk about timing so we just label the inputs for example for this AND gate here according to the variables we have in there for non-linear gates like the AND gates we're doing the following rule so we're creating this labeling here where we join the empty set with the first input set with the stable set of the first input and the stable set of the second input and then we're doing also this point-wise set difference of both labels here for linear gates like an x-word this looks a bit differently so for this we only do the last part here where we do this point-wise set difference and for registers and all of just one input gates we just propagate the stable set so up to now we don't neglect the timing so I'm going to change this now so let's talk about glitches so this is really something hardware-specific and I want to discuss this on a much simpler or in a simpler circuit as we had before this is really just two XORs, a masked secret and some masks and so when we look at the output of the first XOR we would get S, XOR, MS because this is what SM is XOR, M1 and when we look at the output we basically get S, XOR, M1 because we cancel out MS so this looks secure up to now however if we assume that in the next cycle we would process a different secret so we also have different input signals but we assume that this masked M1 here arrives a bit later than all the other signals here what we get at the output is S had XOR, M1 which doesn't look bad, right? but the problem is so in the probing model it is assumed that an attacker places a probing needle on your circuit can continuously model what the circuit is doing at this point so you would not only get this equation here but it will also record the equation from the cycle before and when you combine this you can learn something about the difference of the secrets that you had before so this is then not secure this is not what we want to have and if the signals then settle again this flaw vanishes and this is basically what we call a glitch so a temporary violation of this probing assumption so in order to also cover this we need to extend our rules and we also added a second set here which we call the transient set which is here denoted in red and for inputs of the circuit we just do the same thing as for the stable set for non-linear gates we already have a rule that really covers the worst case so we haven't modified that but for linear gates where also glitches can happen as you have seen on the slide before we're basically going to use the same non-linear gate rule as before that covers the worst case scenario and then for registers we say the transient set totally disappears because registers are blocking one cycle from the other and so we then just propagate the stable set here again so let's have a look at this on a bigger example on the circuit we had before at the beginning and we just look at the transient set because this is a purely combinatorial circuit so again we are leaving the input as before and then we apply our non-linear propagation rules also for the XOR gates so we get this empty set the copy of the first input copy of the second input and then we also get the point-wise set difference so if we are doing this for all gates here what we then see is that this circuit is indeed not secure for transient signals and privileges because we see that we end up with signal combinations that contain the signal or the secret without any masks in them and this indicates a flawed circuit so enough of the theory we also took this approach and put it into a tool and our tool chain works as follows so we take a circuit description for example based on Beryloc or VHDL passes with an open synthesis tool which is called YOSIS and what you get from that is a circuit tree in JSON format that we are going to process further so this contains the gates and the wires so the connections of the circuit and then we need a bit of user interaction here because the user needs to tell us at the input of the circuit which signals are critical, which are secrets which are masks, which are public signals and what is the maximum protection order to them I want the circuit to be tested against so we take this information to a Python script that creates all the propagation rules that are talked before for the concrete circuit we are going to verify and with this and the constraints we are going to call a C3 set solver and this is then going to tell us whether the circuit is secure or not and if it's not secure we can ask for where is the flaw located and what are the signals that produce the flaw so with this implementation we so for this instance of our verification approach we tried a few exemplary circuits that are out there so we started off with verifying some basic building blocks of masked circuits like the ISW and the Trichina end gates which are known to be flawed and also our tool of course indicates this and we also tried some other building blocks like threshold implementations end gate and the main order masking end gate and for this we did the verification up to order 5 for different orders of the multiplier and so in this diagram you can observe the time and the verification order for different orders of the end gate and as you see the verification effort grows exponentially but what's also interesting to see is so finding a flaw is much easier so this is also what we observed in bigger circuits when we actually found a flaw then we would have found this much faster than if we solved this flaw then and run the verification on this but of course we also tried this against bigger circuits so we tried this for example for down catcher S-box so our first order verification took about 20 seconds third order verification about 25 minutes we also tested the file S-box file APN and the biggest circuit was the domain oriented masking protected AES S-box for first order which took between 5 and 10 hours of parallel checking in order to verify this to be a secure circuit so this brings me to the conclusion of the talk and I want to end with a positive note on the verification of masking or in the formal verification of masking so we really think that there is hope for practical formal verification of masked circuits and that this really can become not only an alternative but a replacement for empirical and horisical methods that are now the predominant form of verifying these masked circuits we feel that there's still a long way to go to cover everything and to make this so efficient that we can improve complete circuits and for higher protection orders but there's also lots of room for improvement and one way to go for example is this composability and the combined form of this composability in ocean and so on so there are really some ideas out there how we can improve our approach and this is just the first step so thank you so we have time for some questions you have a circuit which is secure without glitches and then with glitches it's insecure and the circuit is very big then the problem is that you have to decide is it really insecure or not because in practice I don't know if you want to make it secure against glitches it will be much bigger you probably need to add some registers but the thing is so we have the stable set rules and so the first thing that we do when we practically verify because this is really a tool that we use when we are going to implement new stuff so this is really a practical tool that is already in use the first thing we do is we just test for the stable set rules this doesn't have this huge exponential blow up so this works really much much faster than also applying these transient set rules so this is the first thing we do before we go to the transient set is there scope to add some probabilities in this setting like to say what's the probability of actually having a glitch because I don't know in design so we don't take concrete signal timings into account because this can also completely vary so if you are going to produce an ACG for example and you take two different devices then this can also have completely different signal timings or this could vary when you have different environmental conditions you could but I don't think this would make things easier actually so right now I think it's better to just verify against the worst case than taking concrete signal timings into account because also this assumption that you would have the signal timings is not quite realistic in India okay thank you for the very nice talk I have a question for like at the end of your talk you said that you could do parallel checking for the verification of masking limitations so I guess when you do parallel checking is for checking each secret like each bit of the secret separately yes okay so can you explain in a few words how you can do that because you put flavors on the nodes so you need flavors for each secret so how can it be faster with yeah basically what we are doing we just modifying the labels at the input by just removing the other secrets so for example if you take an AESS box you have eight secrets in there right and verifying against all of the secrets is quite time consuming so you want to do this in parallel and so what we are doing is we are taking all the labelings that we would have but just removing the seven other secrets like if it was public variables like if it was public variables for instance or you just remove the nodes we keep the masks this is what we keep because this is what we need because it can also become insecure because of this mask in some way but we remove the secrets okay thank you okay let's thank the speaker again


I'm moving on to sports news. Former U.S. President Barack Obama has bought a stake in the NBA's Africa business through his foundation. The NBA said Tuesday basketball Africa League Obama will have a minority equity stake in NBA Africa, a new entity set up this year to run all the league's business on the continent. The NBA said Obama would use any profits to fund the Obama Foundation's youth and leadership programs in Africa. Obama has been linked to the NBA's Africa operations since 2019, although it wasn't clear until Tuesday exactly what his involvement would be. NBA Africa and World Body FIBA combined to set up the first pro basketball league in Africa. The basketball league held its inaugural session in May after being delayed for a year by the pandemic. It's future to top teams from 12 African countries.


This is stock number 7J486A. We are here at Summit Automotive in Fond du Lac, Wisconsin, your new and used Jeep headquarters. Today we are checking out this super clean 2017 Jeep renegade Trailhawk. This vehicle has the 2.4 liter four-cylinder multi-air motor. From this HD video, you will be able to tell that this Jeep is extremely clean all the way around as the HID headlights, the factory fog lights, the red polter-coated tow hooks, Alpine white is the color. Like to point out that we shoot all of our videos in 1080p, so if you have HD capabilities on your computer tablet or a smartphone device, turn them on right now because it is like you're right here. Looking at the vehicle with me. Driver's side rim is in excellent condition. Painted and polished aluminum rims. It has Falcon, Wild Peak HT tires, and these are 215 65R 17s. These tires have probably about 95% of the tread left, I'd figure. With only around 4,000 miles on this vehicle or less, it is, these tires are very new. No dents or dings on that front fender. Part of the trailhawk package. It does come with the black Jeep lettering. It comes with the black hood decal. That is a decals or sticker if you wanted to call it that, but that could be removed if you did not like it. Front bumper is absolutely perfect. No dents or dings on that. Passengers side fender is really nice as well. Passengers side rim, no scuffs or scrapes on that. And as we go down this side of the vehicle just as clean as that front of the vehicle, no dents or dings. We take these HD videos so if you are far away, or even if you're close by and just cannot make the trip down, you can still see the vehicle, hear the vehicle, and have confidence in what you're looking at before you even get here. Down this side, very very clean. I didn't see one single dent or ding. These back rims are in excellent shape as well. What I like about the renegades is they come with the four-wheel disc brakes, and the back tires have just as much tread as front tires. Once again, frame and under body. Very clean on that vehicle. This one does have the capless fuel fill, and if you'll notice it does have a little spire that says chow baby. That's where you put the food for this machine. As we come around to the back of the vehicle, no dents, dings, or cracks on that rear bumper, that tailgate is in excellent condition as well. No dents or dings. And the back storage area is very clean. Under here is the full-size spare tire. And it is a matching tire to the rest of them.  And this one does come with the sunshade. As far as I know, the Trailhawk is the only renegade that comes with the spare tire. As we come around to this side of the vehicle, just as clean as a passenger side. This back rim is in excellent shape as well. No dents or dings down this side. It has the entering-go system with the keyless entry. It has the blind spot monitoring and the built-in directional signals in the mirror. Inside the Trailhawk package gives you the black cloth interior with the red stitching, the Trailhawk stitched backrest. Also has the topographic map seat insert, driver's seat height adjuster, and the factory all-weather format throughout. Power windows, power locks, and power mirrors. It has the carabiner speaker. I'm sorry, this vehicle has 5,626 miles. As you can see, it has the 7-inch TFT display.  It has auto headlamps. It has a heated leather-wrapped steering wheel with the red stitching. Cruise controls on that side. Bluetooth and information center controls on that side comes with the 6.5-inch touchscreen radio. This one does have factory navigation. There your heated seat and heated steering wheel buttons. This is also where your backup camera shows up. Pretty cool stuff right there.   Get the little topographical map once again in the coin slot right there. Augs and USB jack. Factory all-weather floor mat on that side, and the passenger seat is very nice and clean as well. No rips or tears on that. The headliner is very clean in this vehicle, and finally you get an SOS or a 911 and assist system in this vehicle. Map lights. Also, you have stability control and the electronic parking brake. You get the cool red trim around the shifter and the air vents. We'll take a quick look at the back seats, and then we will check out under the hood. Back seats are just as clean as the front seats. There are no rips. There are no tears back here. It does have the latch child safety system for your car seats. Red stitching throughout. Factory all-weather floor mats back here, and it does have a 115 volt, 150 watt plug-in. These seats do fold down, almost completely flat for extra storage. And we'll take a quick look under the hood. Under the hood we have the 2.4 liter four-cylinder multi-air motor. Engine bay is very clean, runs very smooth. This vehicle has been fully safe and inspected by our service shop. Has a fresh oil and filter change. All the fluids have been checked and topped off. 180 horsepower. Very clean. See more pictures of this vehicle or one of our other 400 new and used cars, trucks, SUVs, minivans, Wranglers. You name it, we got it.  Videos of every single used vehicle that we have all at summitauto.com. If you want to make this Jeep year, give us a call right now,<PHONE_NUMBER>. Ask for one of our sales associates to make this Jeep Renegade Trailhawk year today. Once again, that number is<PHONE_NUMBER>. Thanks again for checking out the video. And if you would like to check out more, you can go to youtube.com. Summit Auto, remember to like, subscribe, and share on this vehicle and all the videos that you see there. In fact, in a second, you will see a link to subscribe to our YouTube channel on your left. A link to more SUV and inventory videos like this one on your right. If you have not been to our website on the bottom, a link to this vehicle on our website, click those checks out. We really look forward to helping you with this super clean 2017 Jeep Renegade Trailhawk. Thanks again.