Abstract:The implementation security of post-quantum cryptography (PQC) algorithms has emerged as a critical concern with the PQC standardization process reaching its end. In a side-channel-assisted chosen-ciphertext attack, the attacker builds linear inequalities on secret key components and uses the belief propagation (BP) algorithm to solve. The number of inequalities leverages the query complexity of the attack, so the fewer the better. In this paper, we use the PQC standard algorithm CRYSTALS-K yber as a study case to construct bilateral inequalities on key variables with substantially narrower intervals using a side-channel-assisted oracle. For K YBER 512, K YBER 768, and K YBER 1024, the average Shannon entropy carried by such inequality is improved from the previous 0.6094, 0.4734, and 0.8544 to 0.6418, 0.4777, and 1.2007. The number of such inequalities required to recover the key utilizing the BP algorithm for K YBER 512 and K YBER 1024 is reduced by 5.32% and 40.53% in theory and experimentally the reduction is even better. The query complexity is reduced by 43%, 37%, and 48% for K YBER 512, 768, and 1024 assuming reasonably perfect reliability. Furthermore, we introduce a strategy aimed at further refining the interval of inequalities. Diving into the BP algorithm, we discover a measure metric named JSD (Jensen-Shannon distance)-metric that can gauge the tightness of an inequality. We then develop a machine learning-based strategy to utilize the JSD-metrics to contract boundaries of inequalities even with fewer inequalities given, thus improving the entropy carried by the system of linear inequalities. This contraction strategy is at the algorithmic level and has the potential to be employed in all attacks endeavoring to establish a system of inequalities concerning key variables.

Ciphertext Malleability in Lattice-Based KEMs as a Countermeasure to Side Channel Analysis

Lattice-based PKEs/KEMs

Magnifying Side-Channel Leakage of Lattice-Based Cryptosystems with Chosen Ciphertexts: The Case Study of Kyber

Side-channel and Fault-injection attacks over Lattice-based Post-quantum Schemes (Kyber, Dilithium): Survey and New Results

Carry Your Fault: A Fault Propagation Attack on Side-Channel Protected LWE-based KEM

Combined Fault and DPA Protection for Lattice-Based Cryptography

A Power Side-channel Attack Framework for Post Lattice Quantum Cryptography

A Systematic Approach and Analysis of Key Mismatch Attacks on Lattice-Based NIST Candidate KEMs

Lattice-Based Vulnerabilities in Lee Metric Post-Quantum Cryptosystems

Find the Bad Apples: an Efficient Method for Perfect Key Recovery under Imperfect SCA Oracles – A Case Study of Kyber

Post-challenge Leakage in Public-Key Encryption.

A closer look at the belief propagation algorithm in side-channel attack on CCA-secure PQC KEM

Algebraic Side-Channel Attacks on KLEIN

Side-Channel Cube Attacks on EPCBC

Flexible and Compact MLWE-Based KEM

A 40nm 1.26µ/op Energy-Efficient CRYSTALS-KYBER Post-Quantum Crypto-Processor with Comprehensive Side Channel Security Analysis and Countermeasures

Side-Channel Analysis on Lattice-Based KEM Using Multi-feature Recognition - the Case Study of Kyber

Quantum Differential and Linear Cryptanalysis

A Concrete LIP-Based KEM With Simple Lattices

Strong Leakage and Tamper-Resilient PKE from Refined Hash Proof System.

On Quantum Chosen-Ciphertext Attacks and Learning with Errors