Abstract:—In 2022, NIST selected Kyber and Dilithium as post-quantum cryptographic standard algorithms. The Number Theoretic Transformation (NTT) algorithm, which facilitates polynomial multiplication, has become a primary target for side-channel attacks. In this work, we embed the NTT transformation matrix in Dilithium and Kyber into the SIS search problem, and further, we propose a divide and conquer strategy for dimensionality reduction of the SIS problem by utilizing the properties of NTT, and discuss the effectiveness of the BKZ algorithm for solving the problem by using the LLL and with different blocksize, respectively. When using BKZ-60, the time required to recover private keys s 1 for Dilithium2 after using the dimensionality reduction strategy is reduced from 82 hours to 1 minute, which is a 4,900 × improvement, and the minimum number of coefficients required is reduced from 65 to 32, which is close to the theoretical lower limit value of 28. Furthermore, we propose a parameter-adjustable CPA scheme to expedite the recovery of a single coefficient in NTT domain. Combining this CPA scheme with the SIS-assisted approach, we executed practical attacks on both unprotected and masked implementations of Dilithium and Kyber on an ARM Cortex-M4. The results demonstrate that, using 5,000 power traces, we can recover complete s 1 of Dilithium2 in 2.4 minutes, which achieve a 400 × speedup compared to the best-known attacks. And Kyber512 takes only 0.5 minutes, a 7.5 × improvement over what’s already working. Moreover, we successfully break the first-order masked implementations and explore the potential applicable to higher-order implementations.

Cryptanalysis Of The Compression Function Of Simd

Partial-Collision Attack on the Round-Reduced Compression Function of Skein-256.

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

Efficient Hamming weight-based side-channel cube attacks on PRESENT

Improved Boomerang Attacks on SM3.

The Boomerang Attacks on the Round-Reduced Skein-512.

Flush-reload cache timing attack on SM2 digital signature algorithm

Enhanced Side-Channel Cube Attacks on PRESENT.

Fault-cube attack on SIMON family of lightweight block ciphers

A General SIMD-Based Approach to Accelerating Compression Algorithms.

Efficient Flush-Reload Cache Attack on Scalar Multiplication Based Signature Algorithm

Improved Cryptanalysis on RIPEMD-128

Boomerang Attack On Step-Reduced Sha-512

MultiCollision Attack on the Compression Functions of MD4 and 3-Pass HAVAL.

Improved MITM Cryptanalysis on Streebog

When NTT Meets SIS: Efficient Side-channel Attacks on Dilithium and Kyber

Study the function of building blocks in SHA Family

Interpolation Attacks on Round-Reduced Elephant, Kravatte and Xoofff

SIMD Compression and the Intersection of Sorted Integers

(Quantum) Collision Attacks On Reduced Simpira V2

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2