{"id":"https://openalex.org/W7203795193","doi":"https://doi.org/10.1109/tifs.2026.3725560","title":"Differential Fault Attacks on TFHE-Friendly Cipher FRAST","display_name":"Differential Fault Attacks on TFHE-Friendly Cipher FRAST","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7203795193","doi":"https://doi.org/10.1109/tifs.2026.3725560"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2026.3725560","doi":"https://doi.org/10.1109/tifs.2026.3725560","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3725560","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tifs.2026.3725560","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101633880","display_name":"Weizhe Wang","orcid":"https://orcid.org/0000-0002-6910-687X","observed_orcids":["https://orcid.org/0000-0002-6910-687X","https://orcid.org/0009-0008-1416-167X","https://orcid.org/0009-0008-7220-229X"]},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weizhe Wang","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":"https://orcid.org/0009-0008-7220-229X","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057734478","display_name":"Deng Tang","orcid":"https://orcid.org/0000-0002-8373-9200","observed_orcids":["https://orcid.org/0000-0002-8373-9200"]},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Deng Tang","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":"https://orcid.org/0000-0002-8373-9200","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":{"value":2645,"currency":"USD","value_usd":2645},"fwci":1.4846,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89897381,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"21","issue":null,"first_page":"7980","last_page":"7991"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/2607","display_name":"Discrete Mathematics and Combinatorics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-fault-attack","display_name":"differential fault attack","score":0.9739999771118164},{"id":"https://openalex.org/keywords/stream-ciphers","display_name":"stream ciphers","score":0.8009999990463257},{"id":"https://openalex.org/keywords/key-recovery","display_name":"key recovery","score":0.8930000066757202},{"id":"https://openalex.org/keywords/linear-structures","display_name":"linear structures","score":0.6389999985694885},{"id":"https://openalex.org/keywords/fault-injection","display_name":"fault injection","score":0.550000011920929},{"id":"https://openalex.org/keywords/countermeasures","display_name":"countermeasures","score":0.7919999957084656}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8208000063896179},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.5580000281333923},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4458000063896179},{"id":"https://openalex.org/C2780221543","wikidata":"https://www.wikidata.org/wiki/Q4681865","display_name":"Cipher","level":3,"score":0.40939998626708984},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.3824999928474426},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.37779998779296875},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33959999680519104},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.33160001039505005},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32839998602867126},{"id":"https://openalex.org/C92950451","wikidata":"https://www.wikidata.org/wiki/Q864718","display_name":"Stream cipher","level":3,"score":0.3118000030517578},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.29280000925064087},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.287200003862381},{"id":"https://openalex.org/C167391956","wikidata":"https://www.wikidata.org/wiki/Q1401211","display_name":"Fault model","level":3,"score":0.2797999978065491},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C89694405","wikidata":"https://www.wikidata.org/wiki/Q7540343","display_name":"Slide attack","level":5,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3725560","doi":"https://doi.org/10.1109/tifs.2026.3725560","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3725560","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tifs.2026.3725560","doi":"https://doi.org/10.1109/tifs.2026.3725560","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3725560","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G4909572393","display_name":null,"funder_award_id":"62272303","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W174421785","https://openalex.org/W632399495","https://openalex.org/W1514489116","https://openalex.org/W1873852107","https://openalex.org/W1897761346","https://openalex.org/W2050244992","https://openalex.org/W2066465211","https://openalex.org/W2108329338","https://openalex.org/W2110162979","https://openalex.org/W2116497491","https://openalex.org/W2168767876","https://openalex.org/W2170489924","https://openalex.org/W2277945859","https://openalex.org/W2469100438","https://openalex.org/W2496281690","https://openalex.org/W2502665144","https://openalex.org/W2560761984","https://openalex.org/W2610617570","https://openalex.org/W2770809732","https://openalex.org/W2782961980","https://openalex.org/W2794866029","https://openalex.org/W2808639052","https://openalex.org/W2914723871","https://openalex.org/W2941618775","https://openalex.org/W2942255051","https://openalex.org/W3022090580","https://openalex.org/W3102086373","https://openalex.org/W3127843656","https://openalex.org/W3176410512","https://openalex.org/W3207691340","https://openalex.org/W4223504011","https://openalex.org/W4254435982","https://openalex.org/W4256518655","https://openalex.org/W4319878960","https://openalex.org/W4321021146","https://openalex.org/W4387993717","https://openalex.org/W4391226174","https://openalex.org/W4393258175","https://openalex.org/W4395485096","https://openalex.org/W4402381417","https://openalex.org/W4408162545","https://openalex.org/W4409155772","https://openalex.org/W4413457324","https://openalex.org/W7163557381"],"related_works":["https://openalex.org/W7214651794","https://openalex.org/W7136258672","https://openalex.org/W4321021146","https://openalex.org/W3135945007","https://openalex.org/W7100060057","https://openalex.org/W4409155772","https://openalex.org/W3195801623","https://openalex.org/W3207938060","https://openalex.org/W3200537352","https://openalex.org/W2748713293"],"abstract_inverted_index":{"Differential":[0],"Fault":[1],"Attacks":[2],"(DFAs)":[3],"have":[4],"recently":[5],"emerged":[6],"as":[7],"a":[8,32,71,82,113,125,161],"significant":[9],"threat":[10],"against":[11],"stream":[12],"ciphers":[13],"specifically":[14,34],"designed":[15],"for":[16,36,169,211],"Hybrid":[17],"Homomorphic":[18,39],"Encryption":[19,40],"(HHE).":[20],"In":[21],"this":[22,140],"work,":[23],"we":[24,69,118,177],"propose":[25],"DFAs":[26],"on":[27],"the$\\textsf":[28],"{FRAST}$cipher,":[29],"which":[30],"is":[31,141],"cipher":[33],"tailored":[35],"Torus-based":[37],"Fully":[38],"(TFHE).":[41],"The":[42],"round":[43,186],"function":[44],"of$\\textsf":[45,67,146],"{FRAST}$employs":[46],"random":[47],"S-boxes":[48,196],"to":[49,152,173],"minimize":[50],"the":[51,63,79,86,96,109,130,135,142,180,184,195,198,212],"number":[52,131],"of":[53,88,132,137,164,187,197,214],"rounds,":[54],"and":[55,76,111,189],"can":[56,77,94,119],"be":[57],"efficiently":[58],"evaluated":[59],"in":[60,124,183],"TFHE.":[61],"Targeting":[62],"unbalanced":[64],"Feistel":[65],"structure":[66],"{FRAST}$,":[68],"design":[70,213],"specialized":[72],"key":[73,97,122,162],"recovery":[74,123],"strategy":[75],"mount":[78],"DFA":[80,93],"with":[81],"few":[83,126],"faults.":[84,106,133],"Under":[85],"assumption":[87,110],"precise":[89],"fault":[90,116],"injection,":[91],"our":[92,138,205],"recover":[95],"within":[98],"one":[99],"second":[100],"using":[101],"just":[102],"4":[103],"or":[104],"6":[105],"When":[107],"discarding":[108],"considering":[112],"more":[114],"practical":[115],"model,":[117],"still":[120],"achieve":[121],"minutes":[127],"without":[128],"increasing":[129],"To":[134],"best":[136],"knowledge,":[139],"first":[143],"fault-type":[144],"analysis":[145,156],"{FRAST}$.":[147,154],"We":[148,202],"also":[149],"explored":[150],"countermeasures":[151],"protect$\\textsf":[153],"Our":[155],"revealed":[157],"that":[158,204],"negacyclic":[159,181],"S-boxes,":[160],"component":[163],"TFHE-friendly":[165,215],"ciphers,":[166],"are":[167],"unsuitable":[168],"incorporating":[170],"linear":[171,192],"structures":[172,193],"resist":[174],"DFA.":[175],"Consequently,":[176],"recommend":[178],"removing":[179],"restriction":[182],"penultimate":[185],"FRAST":[188],"introducing":[190],"non-zero":[191],"into":[194],"last":[199],"two":[200],"rounds.":[201],"believe":[203],"work":[206],"will":[207],"provide":[208],"valuable":[209],"insights":[210],"ciphers.":[216]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-08-20T00:00:00"}