{"id":"https://openalex.org/W7113255382","doi":null,"title":"Side-Channel Analysis of Post-Quantum Cryptographic Algorithms","display_name":"Side-Channel Analysis of Post-Quantum Cryptographic Algorithms","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W7113255382"},"language":"en","primary_location":{"id":"pmh:oai:DiVA.org:kth-324669","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-324669","pdf_url":"https://kth.diva-portal.org/smash/get/diva2:1742628/FULLTEXT01","source":{"id":"https://openalex.org/S4306400653","display_name":"Diva portal (Dalarna University Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/doctoralThesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://kth.diva-portal.org/smash/get/diva2:1742628/FULLTEXT01","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069027667","display_name":"Kalle Ngo","orcid":"https://orcid.org/0000-0002-9842-2038","observed_orcids":["https://orcid.org/0000-0002-9842-2038"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Ngo, Kalle","raw_affiliation_strings":["Universitetsservice US-AB , Sweden 2023"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universitetsservice US-AB , Sweden 2023","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5069027667"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.0032999999821186066,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/side-channel-attacks","display_name":"side-channel attacks","score":0.8500000238418579},{"id":"https://openalex.org/keywords/post-quantum-cryptography","display_name":"post-quantum cryptography","score":0.9980000257492065},{"id":"https://openalex.org/keywords/saber","display_name":"SABER","score":0.9390000104904175},{"id":"https://openalex.org/keywords/crystals-kyber","display_name":"CRYSTALS-Kyber","score":0.9990000128746033},{"id":"https://openalex.org/keywords/key-encapsulation-mechanism","display_name":"key encapsulation mechanism","score":0.9729999899864197},{"id":"https://openalex.org/keywords/higher-order-masking","display_name":"higher-order masking","score":0.8320000171661377},{"id":"https://openalex.org/keywords/first-order-masking","display_name":"first-order masking","score":0.656000018119812},{"id":"https://openalex.org/keywords/shuffling","display_name":"shuffling","score":0.7649999856948853},{"id":"https://openalex.org/keywords/message-recovery","display_name":"message recovery","score":0.5699999928474426},{"id":"https://openalex.org/keywords/deep-learning","display_name":"deep learning","score":0.4970000088214874},{"id":"https://openalex.org/keywords/recursive-learning","display_name":"recursive learning","score":0.7919999957084656},{"id":"https://openalex.org/keywords/hamming-weight","display_name":"Hamming weight","score":0.6430000066757202},{"id":"https://openalex.org/keywords/elliptic-curve-cryptography","display_name":"elliptic curve cryptography","score":0.7519999742507935},{"id":"https://openalex.org/keywords/fault-injection","display_name":"fault injection","score":0.781000018119812},{"id":"https://openalex.org/keywords/hardware-random-number-generator","display_name":"hardware random number generator","score":0.8169999718666077}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.781499981880188},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.7537999749183655},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6837000250816345},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.527899980545044},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5238999724388123},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.47189998626708984},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4544999897480011},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.426800012588501},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.41029998660087585},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4043999910354614},{"id":"https://openalex.org/C201866948","wikidata":"https://www.wikidata.org/wiki/Q228206","display_name":"Random number generation","level":2,"score":0.3871000111103058},{"id":"https://openalex.org/C2983609787","wikidata":"https://www.wikidata.org/wiki/Q10534782","display_name":"Software implementation","level":3,"score":0.373199999332428},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3668999969959259},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.3573000133037567},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.35019999742507935},{"id":"https://openalex.org/C126954023","wikidata":"https://www.wikidata.org/wiki/Q4316440","display_name":"Neural cryptography","level":4,"score":0.3479999899864197},{"id":"https://openalex.org/C6295992","wikidata":"https://www.wikidata.org/wiki/Q976521","display_name":"Cryptosystem","level":3,"score":0.3402000069618225},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.3237999975681305},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.31470000743865967},{"id":"https://openalex.org/C108277079","wikidata":"https://www.wikidata.org/wiki/Q7233576","display_name":"Post-quantum cryptography","level":4,"score":0.29420000314712524},{"id":"https://openalex.org/C71743495","wikidata":"https://www.wikidata.org/wiki/Q2845210","display_name":"Power analysis","level":3,"score":0.2874999940395355},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.28040000796318054},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.27219998836517334},{"id":"https://openalex.org/C165922616","wikidata":"https://www.wikidata.org/wiki/Q4241181","display_name":"Strong cryptography","level":3,"score":0.26820001006126404},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25859999656677246}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:DiVA.org:kth-324669","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-324669","pdf_url":"https://kth.diva-portal.org/smash/get/diva2:1742628/FULLTEXT01","source":{"id":"https://openalex.org/S4306400653","display_name":"Diva portal (Dalarna University Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/doctoralThesis"}],"best_oa_location":{"id":"pmh:oai:DiVA.org:kth-324669","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-324669","pdf_url":"https://kth.diva-portal.org/smash/get/diva2:1742628/FULLTEXT01","source":{"id":"https://openalex.org/S4306400653","display_name":"Diva portal (Dalarna University Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/doctoralThesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7113255382.pdf","grobid_xml":"https://content.openalex.org/works/W7113255382.grobid-xml"},"referenced_works_count":72,"referenced_works":["https://openalex.org/W76123274","https://openalex.org/W99107328","https://openalex.org/W109426440","https://openalex.org/W194952517","https://openalex.org/W1511843316","https://openalex.org/W1537450689","https://openalex.org/W1560027954","https://openalex.org/W1562542037","https://openalex.org/W1572251059","https://openalex.org/W1595155753","https://openalex.org/W1613874182","https://openalex.org/W1712912884","https://openalex.org/W1724890242","https://openalex.org/W1748081333","https://openalex.org/W1766541702","https://openalex.org/W1774054610","https://openalex.org/W1829732909","https://openalex.org/W1837001584","https://openalex.org/W1897761346","https://openalex.org/W1991809541","https://openalex.org/W1994460359","https://openalex.org/W2008071701","https://openalex.org/W2040870580","https://openalex.org/W2053923031","https://openalex.org/W2062989416","https://openalex.org/W2067235573","https://openalex.org/W2072085101","https://openalex.org/W2084500851","https://openalex.org/W2084652510","https://openalex.org/W2085992264","https://openalex.org/W2098290658","https://openalex.org/W2125093890","https://openalex.org/W2139253318","https://openalex.org/W2140823840","https://openalex.org/W2142048307","https://openalex.org/W2154909745","https://openalex.org/W2159226773","https://openalex.org/W2168676717","https://openalex.org/W2209309698","https://openalex.org/W2293214346","https://openalex.org/W2395579298","https://openalex.org/W2556867355","https://openalex.org/W2560864854","https://openalex.org/W2740580365","https://openalex.org/W2746796098","https://openalex.org/W2841650358","https://openalex.org/W2891841929","https://openalex.org/W2918822786","https://openalex.org/W2946582523","https://openalex.org/W2977602989","https://openalex.org/W2981599111","https://openalex.org/W2990826112","https://openalex.org/W3023346418","https://openalex.org/W3037033594","https://openalex.org/W3049114471","https://openalex.org/W3082776805","https://openalex.org/W3089979403","https://openalex.org/W3107240409","https://openalex.org/W3107729397","https://openalex.org/W3127035137","https://openalex.org/W3128429511","https://openalex.org/W3135053459","https://openalex.org/W3140517496","https://openalex.org/W3161883688","https://openalex.org/W3177924429","https://openalex.org/W3196882438","https://openalex.org/W3204480019","https://openalex.org/W3210769154","https://openalex.org/W4220663753","https://openalex.org/W4239750483","https://openalex.org/W4240560709","https://openalex.org/W4245524709"],"related_works":["https://openalex.org/W7112540185","https://openalex.org/W7071372717","https://openalex.org/W3210051033","https://openalex.org/W4392249245","https://openalex.org/W3159164431","https://openalex.org/W7160402656","https://openalex.org/W7162168373","https://openalex.org/W7163580438","https://openalex.org/W7220374060","https://openalex.org/W4414558640"],"abstract_inverted_index":{"Public":[0],"key":[1,296],"cryptographic":[2],"schemes":[3],"used":[4,345],"today":[5],"rely":[6,46],"on":[7,47,87,100,130,144,163,375,400,457],"the":[8,28,68,89,102,156,174,197,215,237,283,293,301,311,348,370,427,435,464,468,480,501],"intractability":[9],"of":[10,70,72,91,104,123,126,133,168,173,186,217,221,247,320,334,372,386,425,430,466,470,482,488,503],"certain":[11],"mathematical":[12],"problems":[13,48],"that":[14,45,64,243,329,361,415,507],"are":[15,65,276,494,508],"known":[16,50],"to":[17,51,78,94,116,304,346,364,419,475,485,496,510],"be":[18,52,76,259,344],"efficiently":[19],"solvable":[20],"with":[21,226,282,306,440],"a":[22,37,55,84,121,140,145,178,190,204,223,227,317,357,383,389,396,401,405,421,441,449],"large-scale":[23],"quantum":[24,56],"computer.":[25],"To":[26],"address":[27],"need":[29],"for":[30,39,54,265,452],"long-term":[31],"security,":[32],"in":[33,152,278,300,388,404,409],"2016":[34],"NIST":[35,82,106],"started":[36],"project":[38],"standardizing":[40],"post-quantum":[41],"cryptography":[42],"(PQC)":[43],"primitives":[44],"not":[49],"targets":[53],"computer,":[57],"such":[58],"as":[59],"lattice":[60],"problems.":[61],"However,":[62],"algorithms":[63,93,506],"secure":[66],"from":[67,189,232,332,437],"point":[69],"view":[71],"traditional":[73],"cryptanalysis":[74],"can":[75,258,343],"susceptible":[77],"side-channel":[79,95,117,131,142,398,476,511],"attacks.":[80,96,118],"Therefore,":[81],"put":[83],"major":[85],"emphasis":[86],"evaluating":[88,467],"resistance":[90,469],"candidate":[92,471],"This":[97],"thesis":[98],"focuses":[99],"investigating":[101],"susceptibility":[103,481],"two":[105,239,263,313],"PQC":[107,472,505],"candidates,":[108],"Saber":[109,134,169,248,335],"and":[110,135,137,170,249,256,270,336,350,382,478],"CRYSTALS-Kyber":[111,250,337,387],"Key":[112],"Encapsulation":[113],"Mechanisms":[114],"(KEMs),":[115],"We":[119,261,327,368,413,446],"present":[120,262,395,448],"collection":[122],"nine":[124],"papers,":[125,159,240,314],"which":[127,213],"eight":[128],"focus":[129],"analysis":[132],"CRYSTALS-Kyber,":[136],"one":[138],"demonstrates":[139,479],"passive":[141,397],"attack":[143,399],"hardware":[146,384,402],"random":[147,198,431],"number":[148],"generator":[149],"(RNG)":[150],"integrated":[151,407],"STM32":[153],"MCUs.":[154],"In":[155,236,289,310],"first":[157],"three":[158],"we":[160,241,291,315,394],"demonstrate":[161,369,414],"attacks":[162,477],"higher-order":[164,233],"masked":[165,191,234],"software":[166,245],"implementations":[167,246,333,474,484],"CRYSTALS-Kyber.":[171],"One":[172],"main":[175,201,354],"contributions":[176],"is":[177,203,356,417],"single-step":[179],"deep":[180],"learning":[181],"message":[182,224,266],"recovery":[183,297],"method":[184,209,298,360,374,451],"capable":[185,220,424],"recovering":[187,222,279,426],"secrets":[188],"implementation":[192,385],"directly,":[193],"without":[194],"explicitly":[195],"extracting":[196],"masks.":[199],"Another":[200],"contribution":[202,355],"new":[205,450],"neural":[206,218,422],"network":[207,423],"training":[208,216],"called":[210],"recursive":[211],"learning,":[212],"enables":[214],"networks":[219],"bit":[225],"probability":[228],"higher":[229,442],"than":[230,443],"99%":[231],"implementations.":[235],"next":[238],"show":[242,328],"even":[244],"protected":[251],"by":[252,434],"both":[253],"first-order":[254],"masking":[255],"shuffling":[257],"compromised.":[260],"methods":[264],"recovery:":[267],"Hamming":[268,428],"weight-based":[269],"Fisher-Yates":[271],"(FY)":[272],"index-based.":[273],"Both":[274],"approaches":[275],"successful":[277],"secret":[280,295,351],"keys,":[281],"latter":[284],"using":[285],"considerably":[286],"fewer":[287],"traces.":[288],"addition,":[290],"extend":[292],"ECC-based":[294],"presented":[299],"prior":[302],"chapter":[303],"ECCs":[305],"larger":[307],"code":[308],"distances.":[309],"last":[312,411],"consider":[316],"different":[318],"type":[319],"side":[321,341,489],"channel":[322,490],"amplitude-modulated":[323,339],"electromagnetic":[324],"(EM)":[325],"emanations.":[326],"information":[330],"leaked":[331],"through":[338],"EM":[340],"channels":[342],"recover":[347],"session":[349],"keys.":[352],"The":[353],"multi-bit":[358],"error-injection":[359],"allows":[362],"us":[363],"exploit":[365],"byte-level":[366],"leakage.":[367],"success":[371],"our":[373,410,461],"an":[376],"nRF52832":[377],"system-on-chip":[378],"supporting":[379],"Bluetooth":[380],"5":[381],"Xilinx":[390],"Artix-7":[391],"FPGA.":[392],"Finally,":[393],"TRNG":[403],"commercial":[406],"circuit":[408],"paper.":[412],"it":[416],"possible":[418],"train":[420],"weight":[429],"numbers":[432],"generated":[433],"RNG":[436],"power":[438],"traces":[439],"60%":[444],"probability.":[445],"also":[447],"mitigating":[453],"device":[454],"inter-variability":[455],"based":[456],"iterative":[458],"re-training.":[459],"Overall,":[460],"research":[462],"highlights":[463],"importance":[465],"algorithm":[473],"current":[483],"various":[486],"types":[487],"analysis.":[491,512],"Our":[492],"findings":[493],"expected":[495],"provide":[497],"valuable":[498],"insights":[499],"into":[500],"design":[502],"future":[504],"resistant":[509]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-12-10T00:00:00"}