Abstract:The implementation security of post-quantum cryptography (PQC) algorithms has emerged as a critical concern with the PQC standardization process reaching its end. In a side-channel-assisted chosen-ciphertext attack, the attacker builds linear inequalities on secret key components and uses the belief propagation (BP) algorithm to solve. The number of inequalities leverages the query complexity of the attack, so the fewer the better. In this paper, we use the PQC standard algorithm CRYSTALS-K yber as a study case to construct bilateral inequalities on key variables with substantially narrower intervals using a side-channel-assisted oracle. For K YBER 512, K YBER 768, and K YBER 1024, the average Shannon entropy carried by such inequality is improved from the previous 0.6094, 0.4734, and 0.8544 to 0.6418, 0.4777, and 1.2007. The number of such inequalities required to recover the key utilizing the BP algorithm for K YBER 512 and K YBER 1024 is reduced by 5.32% and 40.53% in theory and experimentally the reduction is even better. The query complexity is reduced by 43%, 37%, and 48% for K YBER 512, 768, and 1024 assuming reasonably perfect reliability. Furthermore, we introduce a strategy aimed at further refining the interval of inequalities. Diving into the BP algorithm, we discover a measure metric named JSD (Jensen-Shannon distance)-metric that can gauge the tightness of an inequality. We then develop a machine learning-based strategy to utilize the JSD-metrics to contract boundaries of inequalities even with fewer inequalities given, thus improving the entropy carried by the system of linear inequalities. This contraction strategy is at the algorithmic level and has the potential to be employed in all attacks endeavoring to establish a system of inequalities concerning key variables.

CCA Secure Threshold KEM Scheme Against Adaptive Corruption Attacks in Standard Model

Distributed Certification Application Via a Trusted Dealer

On Security Analysis of an After-the-fact Leakage Resilient Key Exchange Protocol

A Homomorphic Encryption Scheme with Adaptive Chosen Ciphertext Security but Without Random Oracle

Compact and Flexible KEM From Ideal Lattice

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

A Systematic Approach and Analysis of Key Mismatch Attacks on Lattice-Based NIST Candidate KEMs

Enhanced Side-Channel Cube Attacks on PRESENT.

Side-Channel Cube Attacks on EPCBC

Improved Low-Entropy Masking Scheme For Led With Mitigation Against Correlation-Enhanced Collision Attacks

A Note on the Security of KHL Scheme

CCA-Secure Hybrid Encryption in Correlated Randomness Model and KEM Combiners

Defending Against Key Exposure in Attribute-Based Encryption

Ciphertext Malleability in Lattice-Based KEMs as a Countermeasure to Side Channel Analysis

Flexible and Compact MLWE-Based KEM

An Efficient Window-Based Countermeasure to Power Analysis of ECC Algorithms

Threshold-based Obfuscated Keys with Quantifiable Security against Invasive Readout

A closer look at the belief propagation algorithm in side-channel attack on CCA-secure PQC KEM

A New Threshold Signature Scheme to Withstand the Conspiracy Attack.

Key Replacement Attack Against A Generic Construction Of Certificateless Signature

Magnifying Side-Channel Leakage of Lattice-Based Cryptosystems with Chosen Ciphertexts: The Case Study of Kyber