Fast first-order masked NTTRU

DOI10.1007/978-3-031-29497-6_7MaRDI QIDQ6088706zbMATH OpenFDO

Authors Daniel Heinz, Gabi Dreo Rodosek

Publication date 16 November 2023

Published in Constructive Side-Channel Analysis and Secure Design (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1007/978-3-031-29497-6_7

zbMATH Keywords

ARM Cortex M4countermeasureDPAlattice-based cryptographymaskingNTRUNTTRU

Mathematics Subject Classification ID

Data encryption (aspects in computer science) (68P25) Cryptography (94A60)

Recommendations

• High-speed key encapsulation from NTRU
• Memory-efficient high-speed implementation of Kyber on Cortex-M4
• Higher-order masked Saber
• Masking Dilithium. Efficient implementation and side-channel evaluation
• NTRU prime: reducing attack surface at low cost

Cites work

• A key-recovery timing attack on post-quantum primitives using the Fujisaki-Okamoto transformation and its application on FrodoKEM
• A new algorithm for switching from arithmetic to Boolean masking.
• A sound method for switching between Boolean and arithmetic masking
• All the AES you need on Cortex-M3 and M4
• Chipwhisperer: an open-source platform for hardware embedded security research
• Differential power analysis
• Efficient and provably secure methods for switching from arithmetic to Boolean masking
• Estimate all the \(\{\)LWE, NTRU\(\}\) schemes!
• Faster multiplication in \(\mathbb{Z}_{2^m}[x]\) on Cortex-M4 to speed up NIST PQC candidates
• Fault-enabled chosen-ciphertext attacks on Kyber
• Higher-order masked Saber
• NTRU: A ring-based public key cryptosystem
• Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer
• Secure conversion between Boolean and arithmetic masking of any order
• Secure integration of asymmetric and symmetric encryption schemes
• Single-trace side-channel attacks on masked lattice-based encryption
• Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems
• Towards sound approaches to counteract power-analysis attacks

Cited in

(1)

• Optimal First-Order Masking with Linear and Non-linear Bijections

This page was built for publication: Fast first-order masked NTTRU

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q6088706)