Abstract:Recently, the construction of cryptographic schemes based on hard lattice problems has gained immense popularity. Apart from being quantum resistant, lattice-based cryptography allows a wide range of variations in the underlying hard problem. As cryptographic schemes can work in different environments under different operational constraints such as memory footprint, silicon area, efficiency, power requirement, etc., such variations in the underlying hard problem are very useful for designers to construct different cryptographic schemes. In this work, we explore various design choices of lattice-based cryptography and their impact on performance in the real world. In particular, we propose a suite of key-encapsulation mechanisms based on the learning with rounding problem with a focus on improving different performance aspects of lattice-based cryptography. Our suite consists of three schemes. Our first scheme is Florete, which is designed for efficiency. The second scheme is Espada, which is aimed at improving parallelization, flexibility, and memory footprint. The last scheme is Sable, which can be considered an improved version in terms of key sizes and parameters of the Saber key-encapsulation mechanism, one of the finalists in the National Institute of Standards and Technology's post-quantum standardization procedure. In this work, we have described our design rationale behind each scheme. Further, to demonstrate the justification of our design decisions, we have provided software and hardware implementations. Our results show Florete is faster than most state-of-the-art KEMs on software and hardware platforms. The scheme Espada requires less memory and area than the implementation of most state-of-the-art schemes. The implementations of Sable maintain a trade-off between Florete and Espada regarding performance and memory requirements on the hardware and software platform.

Benchmarking Attacks on Learning with Errors

SALSA VERDE: a machine learning attack on Learning With Errors with sparse small secrets

SALSA PICANTE: a machine learning attack on LWE with binary secrets

The cool and the cruel: separating hard parts of LWE secrets

Salsa Fresca: Angular Embeddings and Pre-Training for ML Attacks on Learning With Errors

SALSA: Attacking Lattice Cryptography with Transformers

Further improvements of the estimation of key enumeration with applications to solving LWE

A Systematic Approach and Analysis of Key Mismatch Attacks on Lattice-Based NIST Candidate KEMs

Scabbard: An Exploratory Study on Hardware Aware Design Choices of Learning with Rounding-based Key Encapsulation Mechanisms

On Accuracy of Testing Decryption Failure Rate for Encryption Schemes under the LWE Assumption

Magnifying Side-Channel Leakage of Lattice-Based Cryptosystems with Chosen Ciphertexts: The Case Study of Kyber

Memory-Efficient Attacks on Small LWE Keys

On Quantum Chosen-Ciphertext Attacks and Learning with Errors

A Public Key Encryption Scheme Based on a New Variant of LWE with Small Cipher Size.

Another Lattice Attack Against ECDSA with the wNAF to Recover More Bits per Signature

Improved Attacks on (EC)DSA with Nonce Leakage by Lattice Sieving with Predicate.

Learning with Errors and Extrapolated Dihedral Cosets

Leakage Benchmarking for Universal Gate Sets

Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs

Algebraic Side-Channel Attacks on KLEIN

Compact Lossy and All-but-One Trapdoor Functions from Lattice