{"id":"https://openalex.org/W3046675985","doi":"https://doi.org/10.46586/tches.v2020.i3.483-507","title":"High-Speed Masking for Polynomial Comparison in Lattice-based KEMs","display_name":"High-Speed Masking for Polynomial Comparison in Lattice-based KEMs","publication_year":2020,"publication_date":"2020-06-19","ids":{"openalex":"https://openalex.org/W3046675985","doi":"https://doi.org/10.46586/tches.v2020.i3.483-507","mag":"3046675985"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2020.i3.483-507","doi":"https://doi.org/10.46586/tches.v2020.i3.483-507","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2020.i3.483-507","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8598/8165","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","jufo-1","poland-40","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/I4405276624","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/I4405276624"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/8598/8165","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043503872","display_name":"Florian Bache","orcid":"https://orcid.org/0000-0002-9485-2428","observed_orcids":["https://orcid.org/0000-0002-9485-2428"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Florian Bache","raw_affiliation_strings":["Ruhr-Universit\u00e4t Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr-Universit\u00e4t Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054502917","display_name":"Clara Paglialonga","orcid":"https://orcid.org/0000-0001-7559-3080","observed_orcids":["https://orcid.org/0000-0001-7559-3080"]},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Clara Paglialonga","raw_affiliation_strings":["Technische Universit\u00e4t Darmstadt, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050537735","display_name":"Tobias Oder","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tobias Oder","raw_affiliation_strings":["Ruhr-Universit\u00e4t Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr-Universit\u00e4t Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101961426","display_name":"Tobias Schneider","orcid":"https://orcid.org/0000-0002-6849-5949","observed_orcids":["https://orcid.org/0000-0002-6849-5949","https://orcid.org/0009-0008-3023-5755"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tobias Schneider","raw_affiliation_strings":["NXP Semiconductors Austria, Gratkorn, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors Austria, Gratkorn, Austria","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076453092","display_name":"Tim E. G\u00fcneysu","orcid":"https://orcid.org/0000-0002-3293-4989","observed_orcids":["https://orcid.org/0000-0002-3293-4989"]},"institutions":[{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"nonprofit","lineage":["https://openalex.org/I33256026"]},{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tim G\u00fcneysu","raw_affiliation_strings":["Ruhr-Universit\u00e4t Bochum, Germany; Deutsches Forschungszentrum f\u00fcr K\u00fcnstliche Intelligenz, Germany","Deutsches Forschungszentrum f\u00fcr K\u00fcnstliche Intelligenz, Germany","Ruhr-Universit\u00e4t Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr-Universit\u00e4t Bochum, Germany; Deutsches Forschungszentrum f\u00fcr K\u00fcnstliche Intelligenz, Germany","institution_ids":["https://openalex.org/I33256026","https://openalex.org/I904495901"]},{"raw_affiliation_string":"Deutsches Forschungszentrum f\u00fcr K\u00fcnstliche Intelligenz, Germany","institution_ids":["https://openalex.org/I33256026"]},{"raw_affiliation_string":"Ruhr-Universit\u00e4t Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.1703,"has_fulltext":true,"cited_by_count":38,"citation_normalized_percentile":{"value":0.89085109,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"483","last_page":"507"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9574999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9574999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.023399999365210533,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.013799999840557575,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/higher-order-masking","display_name":"higher-order masking","score":0.8410000205039978},{"id":"https://openalex.org/keywords/fujisaki-okamoto-transform","display_name":"Fujisaki-Okamoto transform","score":0.9760000109672546},{"id":"https://openalex.org/keywords/side-channel-countermeasures","display_name":"side-channel countermeasures","score":0.8759999871253967},{"id":"https://openalex.org/keywords/differential-power-analysis","display_name":"differential power analysis","score":0.9779999852180481},{"id":"https://openalex.org/keywords/post-quantum-cryptography","display_name":"post-quantum cryptography","score":0.7710000276565552},{"id":"https://openalex.org/keywords/cca-security","display_name":"CCA security","score":0.6600000262260437}],"concepts":[{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.831168532371521},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6404450535774231},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.5779808759689331},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.4918234348297119},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.46284741163253784},{"id":"https://openalex.org/C77390884","wikidata":"https://www.wikidata.org/wiki/Q217302","display_name":"Application-specific integrated circuit","level":2,"score":0.45741838216781616},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4272114038467407},{"id":"https://openalex.org/C71743495","wikidata":"https://www.wikidata.org/wiki/Q2845210","display_name":"Power analysis","level":3,"score":0.41096267104148865},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.36821022629737854},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.28613442182540894},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.46586/tches.v2020.i3.483-507","doi":"https://doi.org/10.46586/tches.v2020.i3.483-507","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2020.i3.483-507","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8598/8165","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","jufo-1","poland-40","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/I4405276624","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/I4405276624"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8953d93a7a7a44fa8e4f7f4656a49275","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/8953d93a7a7a44fa8e4f7f4656a49275","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2020, Iss 3 (2020)","raw_type":"article"},{"id":"pmh:oai:tubiblio.ulb.tu-darmstadt.de:160322","doi":null,"is_oa":false,"landing_page_url":"http://tubiblio.ulb.tu-darmstadt.de/view/person/Bache=3AFlorian=3A=3A.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4377196390","display_name":"TUbilio (Technical University of Darmstadt)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I31512782","host_organization_name":"Technische Universit\u00e4t Darmstadt","host_organization_lineage":["https://openalex.org/I31512782"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Artikel"},{"id":"doi:10.13154/tches.v2020.i3.483-507","doi":"https://doi.org/10.13154/tches.v2020.i3.483-507","is_oa":true,"landing_page_url":"https://doi.org/10.13154/tches.v2020.i3.483-507","pdf_url":null,"source":{"id":"https://openalex.org/S4377196777","display_name":"University Library BOCHUM (Ruhr University Bochum)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I904495901","host_organization_name":"Ruhr University Bochum","host_organization_lineage":["https://openalex.org/I904495901"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.46586/tches.v2020.i3.483-507","doi":"https://doi.org/10.46586/tches.v2020.i3.483-507","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2020.i3.483-507","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8598/8165","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","jufo-1","poland-40","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/I4405276624","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/I4405276624"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G18682879","display_name":"EXC 2092: CyberSicherheit im Zeitalter gro\u00dfskaliger Angreifer (CASA)","funder_award_id":"390781972","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G4374936913","display_name":"Security Without Obscurity for Reliable Devices","funder_award_id":"724725","funder_id":"https://openalex.org/F4320338335","funder_display_name":"H2020 European Research Council"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"},{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"},{"id":"https://openalex.org/F4320338335","display_name":"H2020 European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3046675985.pdf","grobid_xml":"https://content.openalex.org/works/W3046675985.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W96383189","https://openalex.org/W1490613864","https://openalex.org/W1585790764","https://openalex.org/W1592625985","https://openalex.org/W1838677899","https://openalex.org/W2261293451","https://openalex.org/W2284081067","https://openalex.org/W2293214346","https://openalex.org/W2400277411","https://openalex.org/W2407452345","https://openalex.org/W2494078997","https://openalex.org/W2575714403","https://openalex.org/W2785011856","https://openalex.org/W2794781100","https://openalex.org/W2798819443","https://openalex.org/W2866028610","https://openalex.org/W2892672032","https://openalex.org/W2903270393","https://openalex.org/W2935641643","https://openalex.org/W2944971662","https://openalex.org/W2947163592","https://openalex.org/W2951963551","https://openalex.org/W2995935153","https://openalex.org/W4235846187"],"related_works":["https://openalex.org/W4310480235","https://openalex.org/W4290714242","https://openalex.org/W4380078924","https://openalex.org/W3209954014","https://openalex.org/W3178862870","https://openalex.org/W4308198585","https://openalex.org/W4323320244","https://openalex.org/W4244459731","https://openalex.org/W3159559383","https://openalex.org/W4297042480"],"abstract_inverted_index":{"With":[0],"the":[1,7,10,17,44,54,69,79,97,129,138,165,200,205,235,251],"NIST":[2,19,55,70],"post-quantum":[3],"standardization":[4,56],"competition":[5,71],"entering":[6],"second":[8],"round,":[9],"interest":[11],"in":[12,128,137,164,195,218,240],"practical":[13,221],"implementation":[14,171],"results":[15],"of":[16,46,53,78,112,140,146,237],"remaining":[18],"candidates":[20,52],"is":[21,58,209],"steadily":[22],"growing.":[23],"Especially":[24],"implementations":[25,187],"on":[26,96,118,172,199,204],"embedded":[27,186],"devices":[28],"are":[29,87],"often":[30],"not":[31],"protected":[32],"against":[33,48],"side-channel":[34,49,84,222],"attacks,":[35],"such":[36],"as":[37,114,180],"differential":[38],"power":[39,231,247],"analysis.":[40],"In":[41],"this":[42,122,241],"regard,":[43],"application":[45],"countermeasures":[47,85],"attacks":[50],"to":[51,66,68,89,143,152],"process":[57],"still":[59],"an":[60,109,169,173],"understudied":[61],"topic.":[62],"Our":[63,132,190],"work":[64,242],"aims":[65],"contribute":[67],"by":[72,83,188,243],"enabling":[73],"a":[74,102,162,181],"more":[75],"realistic":[76],"judgment":[77],"overhead":[80],"cost":[81],"introduced":[82],"that":[86,92,107],"applied":[88],"lattice-based":[90],"KEMs":[91],"achieve":[93],"CCA-security":[94],"based":[95,117,154],"Fujisaki-Okamoto":[98],"transform.":[99],"We":[100],"present":[101],"novel":[103],"higher-order":[104],"masking":[105,206],"scheme":[106],"enables":[108],"efficient":[110,170],"comparison":[111],"polynomials":[113],"previous":[115,147,219],"techniques":[116],"arithmetic-to-Boolean":[119],"conversions":[120],"renders":[121],"(generally":[123],"inexpensive)":[124],"component":[125],"extremely":[126],"expensive":[127],"masked":[130],"case.":[131],"approach":[133],"has":[134],"linear":[135],"complexity":[136,145],"number":[139],"shares":[141],"compared":[142],"quadratic":[144],"contributions":[148],"and":[149,168,208,249],"it":[150],"applies":[151],"lattice":[153],"schemes":[155],"with":[156,161],"prime":[157],"modulus.":[158],"It":[159],"comes":[160],"proof":[163],"probing":[166],"model":[167],"ARM":[174],"Cortex-M4F":[175],"microcontroller":[176],"which":[177],"was":[178],"defined":[179],"preferred":[182],"evaluation":[183],"platform":[184,202],"for":[185,214],"NIST.":[189],"algorithm":[191],"can":[192],"be":[193],"executed":[194],"only":[196,227],"1.5-2.2":[197],"milliseconds":[198],"target":[201],"(depending":[203],"order)":[207],"therefore":[210],"well":[211],"suited":[212],"even":[213],"lightweight":[215],"applications.":[216],"While":[217],"work,":[220],"experiments":[223],"were":[224],"conducted":[225],"using":[226],"5,000":[228],"-":[229],"100,000":[230],"traces,":[232],"we":[233],"confirm":[234],"absence":[236],"first-order":[238],"leakage":[239],"collecting":[244],"1":[245],"million":[246],"traces":[248],"applying":[250],"t-test":[252],"methodology.":[253]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":7}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2020-08-07T00:00:00"}