{"id":"https://openalex.org/W7224941567","doi":"https://doi.org/10.48550/arxiv.2610.39910","title":"From if to Oops: Turning a conditional into a key-recovery oracle","display_name":"From if to Oops: Turning a conditional into a key-recovery oracle","publication_year":2026,"publication_date":"2026-10-29","ids":{"openalex":"https://openalex.org/W7224941567","doi":"https://doi.org/10.48550/arxiv.2610.39910"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.39910","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39910","pdf_url":"https://arxiv.org/pdf/2610.39910","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.39910","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038666287","display_name":"Gustavo Banegas","orcid":"https://orcid.org/0000-0001-5502-2977","observed_orcids":["https://orcid.org/0000-0001-5502-2977"]},"institutions":[{"id":"https://openalex.org/I4210139461","display_name":"Laboratoire d'Informatique de l'\u00c9cole Polytechnique","ror":"https://ror.org/04afed728","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I142476485","https://openalex.org/I4210139461","https://openalex.org/I4210145102","https://openalex.org/I4210159245"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Banegas, Gustavo","raw_affiliation_strings":["LIX, ECLAIR"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LIX, ECLAIR","institution_ids":["https://openalex.org/I4210139461"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160203923","display_name":"Nia Dimitrova","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Dimitrova, Nia","raw_affiliation_strings":["TU/e"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU/e","institution_ids":["https://openalex.org/I83019370"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011060324","display_name":"Monika Trimoska","orcid":"https://orcid.org/0000-0002-1477-0001","observed_orcids":["https://orcid.org/0000-0002-1477-0001"]},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Trimoska, Monika","raw_affiliation_strings":["TU/e"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU/e","institution_ids":["https://openalex.org/I83019370"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.6791999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.6791999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.29440000653266907,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.0142000000923872,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fault-injection-attacks","display_name":"fault injection attacks","score":0.8519999980926514},{"id":"https://openalex.org/keywords/key-recovery","display_name":"key recovery","score":0.6240000128746033},{"id":"https://openalex.org/keywords/isogeny-based-cryptography","display_name":"isogeny-based cryptography","score":0.8370000123977661},{"id":"https://openalex.org/keywords/fault-injection","display_name":"fault injection","score":0.4650000035762787},{"id":"https://openalex.org/keywords/conditionals","display_name":"conditionals","score":0.32499998807907104},{"id":"https://openalex.org/keywords/binary-search","display_name":"binary search","score":0.48399999737739563},{"id":"https://openalex.org/keywords/fault-countermeasures","display_name":"fault countermeasures","score":0.6380000114440918},{"id":"https://openalex.org/keywords/randomization","display_name":"randomization","score":0.6840000152587891}],"concepts":[{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.798799991607666},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.6504999995231628},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.597100019454956},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.49799999594688416},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.4909999966621399},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.4749000072479248},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.46650001406669617},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.439300000667572},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.42730000615119934},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.3930000066757202},{"id":"https://openalex.org/C167391956","wikidata":"https://www.wikidata.org/wiki/Q1401211","display_name":"Fault model","level":3,"score":0.39010000228881836},{"id":"https://openalex.org/C192183473","wikidata":"https://www.wikidata.org/wiki/Q131133","display_name":"Determinism","level":2,"score":0.36809998750686646},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.357699990272522},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2955999970436096},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C162838799","wikidata":"https://www.wikidata.org/wiki/Q596077","display_name":"Counterexample","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C50712370","wikidata":"https://www.wikidata.org/wiki/Q4269346","display_name":"Software fault tolerance","level":3,"score":0.25279998779296875}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:arXiv.org:2610.39910","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39910","pdf_url":"https://arxiv.org/pdf/2610.39910","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:pure.tue.nl:openaire/001c0650-3bec-4bf7-a84f-9959d0ced21d","doi":null,"is_oa":true,"landing_page_url":"https://eprint.iacr.org/2026/2542","pdf_url":"https://pure.tue.nl/ws/files/426144835/2026-2542.pdf","source":{"id":"https://openalex.org/S4406922641","display_name":"TU/e Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Banegas, G, Dimitrova, N R & Trimoska, M 2026 'From if to Oops : Turning a conditional into a key-recovery oracle' International Association for Cryptologic Research. < https://eprint.iacr.org/2026/2542 >","raw_type":"info:eu-repo/semantics/preprint"},{"id":"pmh:oai:HAL:hal-05842970v1","doi":null,"is_oa":true,"landing_page_url":"https://inria.hal.science/hal-05842970","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2026","raw_type":"info:eu-repo/semantics/preprint"},{"id":"doi:10.48550/arxiv.2610.39910","doi":"https://doi.org/10.48550/arxiv.2610.39910","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2610.39910","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.39910","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39910","pdf_url":"https://arxiv.org/pdf/2610.39910","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G3595978272","display_name":null,"funder_award_id":"France 2030","funder_id":"https://openalex.org/F4320316512","funder_display_name":"Bpifrance"},{"id":"https://openalex.org/G5463327868","display_name":"Post-quantum padlock for web browser","funder_award_id":"ANR-22-PETQ-0008","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G6484351754","display_name":"Efficient and SCA--Aware Post-Quantum Cryptographic Design for Embedded Systems (ESCAPE)","funder_award_id":"OCENW.XL.23.112","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"}],"funders":[{"id":"https://openalex.org/F4320316512","display_name":"Bpifrance","ror":"https://ror.org/008zkt807"},{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"},{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7224941567.pdf","grobid_xml":"https://content.openalex.org/works/W7224941567.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4321382413","https://openalex.org/W4404515041","https://openalex.org/W3197640590","https://openalex.org/W3082360640","https://openalex.org/W4406256196","https://openalex.org/W4380879813","https://openalex.org/W3202526068","https://openalex.org/W2963826088","https://openalex.org/W3085791103","https://openalex.org/W3205364068"],"abstract_inverted_index":{"Deterministic":[0],"variants":[1],"of":[2,56,76,145],"CSIDH":[3,19,29,131],"remove":[4],"randomness":[5],"from":[6],"the":[7,64,71,80,92,112,146,155],"group":[8],"action,":[9],"either":[10],"through":[11],"implementation":[12],"techniques":[13],"or,":[14],"as":[15],"in":[16,140],"Houben's":[17],"deterministic":[18,130],"and":[20,104,127,149,180],"OSIDH-LD,":[21],"by":[22,87],"design.":[23],"Since":[24],"earlier":[25],"fault":[26,63,117,143,168,174],"attacks":[27],"on":[28,151,184],"mostly":[30],"target":[31],"random":[32],"point":[33,55],"sampling,":[34],"determinism":[35],"seems":[36],"to":[37,83],"close":[38],"that":[39,43,73,154,173],"avenue.":[40],"We":[41,135],"show":[42,150],"it":[44],"opens":[45],"another:":[46],"every":[47,57],"secret-dependent":[48],"step":[49,66],"occurs":[50],"at":[51,120,162,165],"a":[52,97,101,105,141,152],"fixed,":[53],"public":[54],"execution,":[58],"so":[59],"an":[60,166],"attacker":[61],"can":[62],"same":[65],"repeatedly.":[67],"Our":[68],"attack":[69],"forces":[70],"mask":[72],"selects":[74],"which":[75],"two":[77],"lanes":[78],"computes":[79],"next":[81],"isogeny":[82],"zero,":[84],"for":[85,125,129],"example":[86],"skipping":[88],"one":[89,116],"instruction.":[90],"Whether":[91],"output":[93],"changes":[94],"reveals":[95],"whether":[96],"secret":[98],"exponent":[99],"reaches":[100],"chosen":[102],"threshold,":[103],"binary":[106],"search":[107],"over":[108],"these":[109],"thresholds":[110],"recovers":[111],"full":[113,137],"key":[114],"with":[115,132,160],"per":[118],"execution:":[119],"most":[121],"297":[122],"oracle":[123],"queries":[124],"OSIDH-LD":[126,138],"222":[128],"CSIDH-512-sized":[133],"keys.":[134],"recover":[136],"keys":[139],"software":[142],"simulation":[144],"reference":[147],"implementation,":[148],"ChipWhisperer-Lite":[153],"targeted":[156],"instruction":[157],"is":[158],"skipped":[159],"probability":[161],"least":[163],"0.94":[164],"isolated":[167],"position.":[169],"Finally,":[170],"we":[171],"argue":[172],"resistance":[175],"requires":[176],"giving":[177],"up":[178],"determinism,":[179],"propose":[181],"countermeasures":[182],"relying":[183],"randomization.":[185]},"counts_by_year":[],"updated_date":"2026-11-03T10:50:19.383937","created_date":"2026-10-31T00:00:00"}