{"id":"https://openalex.org/W4409155772","doi":"https://doi.org/10.1109/tc.2025.3558036","title":"Differential Fault Attack on HE-Friendly Stream Ciphers: Masta, Pasta, and Elisabeth","display_name":"Differential Fault Attack on HE-Friendly Stream Ciphers: Masta, Pasta, and Elisabeth","publication_year":2025,"publication_date":"2025-04-04","ids":{"openalex":"https://openalex.org/W4409155772","doi":"https://doi.org/10.1109/tc.2025.3558036"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2025.3558036","doi":"https://doi.org/10.1109/tc.2025.3558036","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2025.3558036","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104021284","display_name":"Weizhe Wang","orcid":"https://orcid.org/0000-0002-9787-0824","observed_orcids":["https://orcid.org/0000-0002-9787-0824","https://orcid.org/0009-0008-7220-229X"]},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weizhe Wang","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0008-7220-229X","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057734478","display_name":"Deng Tang","orcid":"https://orcid.org/0000-0002-8373-9200","observed_orcids":["https://orcid.org/0000-0002-8373-9200"]},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Deng Tang","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-8373-9200","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":1.2371,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.79283392,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"74","issue":"7","first_page":"2267","last_page":"2277"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-fault-attack","display_name":"differential fault attack","score":0.9950000047683716},{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"homomorphic encryption","score":0.8769999742507935},{"id":"https://openalex.org/keywords/stream-ciphers","display_name":"stream ciphers","score":0.9710000157356262},{"id":"https://openalex.org/keywords/pasta","display_name":"pasta","score":0.9819999933242798},{"id":"https://openalex.org/keywords/elisabeth","display_name":"Elisabeth","score":0.996999979019165},{"id":"https://openalex.org/keywords/flip","display_name":"c-FLIP","score":0.6520000100135803},{"id":"https://openalex.org/keywords/key-recovery","display_name":"key recovery","score":0.8209999799728394},{"id":"https://openalex.org/keywords/fault-injection","display_name":"fault injection","score":0.7089999914169312}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6248338222503662},{"id":"https://openalex.org/C92950451","wikidata":"https://www.wikidata.org/wiki/Q864718","display_name":"Stream cipher","level":3,"score":0.606351375579834},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.5740116834640503},{"id":"https://openalex.org/C96675983","wikidata":"https://www.wikidata.org/wiki/Q7622661","display_name":"Stream cipher attack","level":4,"score":0.47968789935112},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.47888368368148804},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.45600685477256775},{"id":"https://openalex.org/C112145980","wikidata":"https://www.wikidata.org/wiki/Q2569509","display_name":"Key schedule","level":5,"score":0.44028639793395996},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4249880015850067},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34270602464675903}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tc.2025.3558036","doi":"https://doi.org/10.1109/tc.2025.3558036","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2025.3558036","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.7900000214576721}],"study_designs":[],"awards":[{"id":"https://openalex.org/G3452697306","display_name":null,"funder_award_id":"12031011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4909572393","display_name":null,"funder_award_id":"62272303","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W6399285","https://openalex.org/W150223756","https://openalex.org/W632399495","https://openalex.org/W1829732909","https://openalex.org/W2035476608","https://openalex.org/W2080063509","https://openalex.org/W2168767876","https://openalex.org/W2289561827","https://openalex.org/W2469100438","https://openalex.org/W2594834629","https://openalex.org/W2794866029","https://openalex.org/W2996671342","https://openalex.org/W3090660998","https://openalex.org/W3096445002","https://openalex.org/W3102086373","https://openalex.org/W3116253690","https://openalex.org/W3173254480","https://openalex.org/W3174727680","https://openalex.org/W3196520766","https://openalex.org/W3205150321","https://openalex.org/W4205136486","https://openalex.org/W4317928194","https://openalex.org/W4321021146","https://openalex.org/W4389857021","https://openalex.org/W4390098349","https://openalex.org/W4390575692","https://openalex.org/W4391226174","https://openalex.org/W4395485096","https://openalex.org/W4395961888","https://openalex.org/W4408365824"],"related_works":["https://openalex.org/W2610633131","https://openalex.org/W2949320056","https://openalex.org/W1489350638","https://openalex.org/W3049224195","https://openalex.org/W2156908834","https://openalex.org/W2390218944","https://openalex.org/W1997885905","https://openalex.org/W3154452887","https://openalex.org/W2406342588","https://openalex.org/W2244520036"],"abstract_inverted_index":{"In":[0,79],"this":[1],"paper,":[2],"we":[3,83,127,149,155],"propose":[4],"the":[5,48,69,74,90,98,142,146,172],"Differential":[6],"Fault":[7],"Attack":[8],"(DFA)":[9],"on":[10,58,103,132,174],"three":[11,55,124],"Homomorphic":[12],"Encryption":[13],"(HE)":[14],"friendly":[15],"stream":[16],"ciphers":[17,28,56,76],"Masta,":[18],"Pasta,":[19,136],"and":[20,24,32,45,110,117,138,168],"Elisabeth.":[21],"Both":[22],"Masta":[23,107],"Pasta":[25],"are":[26,108],"Rasta-like":[27],"with":[29],"publicly":[30],"derived":[31],"pseudo-random":[33],"affine":[34],"layers.":[35],"The":[36],"design":[37],"of":[38,43,72,106,115,135,145],"Elisabeth":[39,147],"is":[40,94],"an":[41],"extension":[42],"FLIP":[44],"FiLIP,":[46],"following":[47],"group":[49],"filter":[50],"permutator":[51],"paradigm.":[52],"All":[53],"these":[54],"operate":[57],"elements":[59],"over":[60],"\u2124por":[61],"\u21242n,":[62],"rather":[63],"than":[64],"\u21242.":[65],"We":[66],"can":[67,128,176],"recover":[68],"secret":[70],"keys":[71],"all":[73],"targeted":[75],"through":[77],"DFA.":[78],"particular,":[80],"for":[81],"Elisabeth,":[82],"present":[84,150],"a":[85,118,161,181],"new":[86],"method":[87],"to":[88,96],"determine":[89],"filtering":[91],"path,":[92],"which":[93,154],"vital":[95],"make":[97],"attack":[99],"practical.":[100],"Our":[101],"attacks":[102],"various":[104],"instances":[105,134],"practical":[109],"require":[111],"only":[112,143],"one":[113],"block":[114],"keystream":[116,170],"single":[119,162],"word-based":[120,125,163],"fault.":[121,164],"By":[122],"injecting":[123],"faults,":[126],"theoretically":[129],"mount":[130],"DFA":[131,173],"two":[133,151],"Pasta-3":[137],"Pasta-4.":[139],"For":[140],"Elisabeth-4,":[141],"instance":[144],"family,":[148],"DFAs":[152],"in":[153,179],"inject":[156],"four":[157],"bit-based":[158],"faults":[159],"or":[160],"With":[165],"15000":[166],"normal":[167],"faulty":[169],"words,":[171],"Elisabeth-4":[175],"be":[177],"completed":[178],"just":[180],"few":[182],"minutes.":[183]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}