Abstract:Lattice-based cryptographic schemes such as Crystals-Kyber and Dilithium are post-quantum algorithms selected to be standardized by NIST as they are considered to be secure against quantum computing attacks. The multiplication in polynomial rings is the most time-consuming operation in many lattice-based cryptographic schemes, which is also subject to side-channel attacks. While NTT-based polynomial multiplication is almost a norm in a wide range of implementations, a relatively new method, incomplete NTT is preferred to accelerate lattice-based cryptography, especially on some computing platforms that feature special instructions. In this paper, we present a novel, efficient and non-profiled power/EM side-channel attack targeting polynomial multiplication based on the incomplete NTT algorithm. We apply the attack on the Crystals-Dilithium signature algorithm and Crystals-Kyber KEM. We demonstrate that the method accelerates attack run-time when compared to the existing approaches. While a conventional non-profiled side-channel attack tests a much larger hypothesis set because it needs to predict two coefficients of secret polynomials together, we propose a much faster zero-value filtering attack (ZV-FA), which reduces the size of the hypothesis set by targeting the coefficients individually. We also propose an effective and efficient validation and correction technique employing the inverse NTT to estimate and modify the mispredicted coefficients. Our experimental results show that we can achieve a speed-up of over brute-force.

Trace-based cryptanalysis of cyclotomic $R_{q,0}\times R_q$-PLWE for the non-split case

Cryptanalysis of PLWE based on zero-trace quadratic roots

A Generalized Approach to Root-based Attacks against PLWE

Fast Multiplication and the PLWE-RLWE Equivalence for an Infinite Family of Cyclotomic Subextensions

RLWE/PLWE equivalence for totally real cyclotomic subextensions via quasi-Vandermonde matrices

Fast polynomial arithmetic in homomorphic encryption with cyclo-multiquadratic fields

The cool and the cruel: separating hard parts of LWE secrets

LWE from non-commutative group rings

Linear (Hull) And Algebraic Cryptanalysis Of The Block Cipher Present

Probability Method for Cryptanalysis of General Multivariate Modular Linear Equation

High Order Linearization Equation (Hole) Attack On Multivariate Public Key Cryptosystems

Constructive Non-Linear Polynomial Cryptanalysis of a Historical Block Cipher

Algebraic aspects of solving Ring-LWE, including ring-based improvements in the Blum-Kalai-Wasserman algorithm

Cryptanalysis of a Public Key Cryptosystem Based on Diophantine Equations Via Weighted LLL Reduction.

Gröbner Basis Cryptanalysis of Ciminion and Hydra

Cryptanalysis of some Nonabelian Group-Based Key Exchange Protocols

Towards the wall-crossing of locally $\mathbb{Q}_p$-analytic representations of $\mathrm{GL}_n(K)$ for a $p$-adic field $K$

Cryptanalysis of the TRMC-4 Public Key Cryptosystem

Cryptanalysis of Rational Multivariate Public Key Cryptosystems

Zero-Value Filtering for Accelerating Non-Profiled Side-Channel Attack on Incomplete NTT-Based Implementations of Lattice-Based Cryptography

Provably Secure Ntru Instances Over Prime Cyclotomic Rings