Abstract:Key Exchange (KE) from RLWE (Ring-Learning with Errors) is a potential alternative to Diffie-Hellman (DH) in a post quantum setting. Key leakage with RLWE key exchange protocols in the context of key reuse has already been pointed out in previous work. The initial attack described by Fluhrer is designed in such a way that it only works on Peikert's KE protocol and its variants that derives the shared secret from the most significant bits of the approximately equal keys computed by both parties. It does not work on Ding's key exchange that uses the least significant bits to derive a shared key. The Signal leakage attack relies on changes in the signal sent by the responder reusing his key, in a sequence of key exchange sessions initiated by an attacker with a malformed key. A possible defense against this attack would be to require the initiator of a key exchange to send the signal, which is the one pass case of the KE protocol. In this work, we describe a new attack on Ding's one pass case without relying on the signal function output but using only the information of whether the final key of both parties agree. We also use LLL reduction to create the adversary's keys in such a way that the party being compromised cannot identify the attack in trivial ways. This completes the series of attacks on RLWE key exchange with key reuse for all variants in both cases of the initiator and responder sending the signal. Moreover, we show that the previous Signal leakage attack can be made more efficient with fewer queries and how it can be extended to Peikert's key exchange, which was used in the BCNS implementation and integrated with TLS and a variant used in the New Hope implementation.

Elimination of a Second-Law-Attack, and All Cable-Resistance-Based Attacks, in the Kirchhoff-Law-Johnson-Noise (KLJN) Secure Key Exchange System

Cable Capacitance Attack against the KLJN Secure Key Exchange

Absolutely Secure Communications by Johnson-like Noise and Kirchhoff's Laws

Kirchhoff Meets Johnson: In Pursuit of Unconditionally Secure Communication

Enhanced secure key exchange systems based on the Johnson-noise scheme

Crypto Analysis of the Key Distribution Scheme Using Noise-Free Resistances

Information Networks Secured by the Laws of Physics

Algebraic Side-Channel Attacks on KLEIN

Complete Attack On Rlwe Key Exchange With Reused Keys, Without Signal Leakage

Unconditionally secure credit/debit card chip scheme and physical unclonable function

A directional coupler attack against the Kish key distribution system

On KLJN-based secure key distribution in vehicular communication networks

Light the Signal: Optimization of Signal Leakage Attacks Against LWE-Based Key Exchange

Information theoretically secure, enhanced Johnson noise based key distribution over the smart grid with switched filters

Practical Randomized RLWE-Based Key Exchange Against Signal Leakage Attack.

Burning the Trojan Horse: Defending against Side-Channel Attacks in QKD

Trojan-horse attack on a real-world quantum key distribution system: Theoretical and experimental security analysis

Beamsplitting Attack to the Revised KKKP Protocol and a Possible Solution

Elliptic flow of thermal photons and dileptons

Preventing side-channel effects in continuous-variable quantum key distribution