{"id":"https://openalex.org/W7129637977","doi":"https://doi.org/10.1145/3733820.3764682","title":"Single-trace Side-Channel Attacks on MAYO Exploiting Leaky Modular Multiplication","display_name":"Single-trace Side-Channel Attacks on MAYO Exploiting Leaky Modular Multiplication","publication_year":2025,"publication_date":"2025-10-13","ids":{"openalex":"https://openalex.org/W7129637977","doi":"https://doi.org/10.1145/3733820.3764682"},"language":null,"primary_location":{"id":"doi:10.1145/3733820.3764682","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733820.3764682","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 1st ACM CCS Workshop on Quantum-Resistant Cryptography and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3733820.3764682","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099036650","display_name":"S\u00f6nke Jendral","orcid":null},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"S\u00f6nke Jendral","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0009-0000-0070-9595","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011438358","display_name":"Elena Dubrova","orcid":"https://orcid.org/0000-0001-7382-9408"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Elena Dubrova","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-7382-9408","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I86987016"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"21","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.7102000117301941,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.7102000117301941,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.2021999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.028300000354647636,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.6122999787330627},{"id":"https://openalex.org/keywords/modular-arithmetic","display_name":"Modular arithmetic","score":0.5968999862670898},{"id":"https://openalex.org/keywords/digital-signature","display_name":"Digital signature","score":0.5257999897003174},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.5238000154495239},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4984999895095825},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.4724999964237213},{"id":"https://openalex.org/keywords/digital-signature-algorithm","display_name":"Digital Signature Algorithm","score":0.4675000011920929},{"id":"https://openalex.org/keywords/multiplication","display_name":"Multiplication (music)","score":0.4487000107765198},{"id":"https://openalex.org/keywords/power-analysis","display_name":"Power analysis","score":0.43939998745918274}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6841999888420105},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6122999787330627},{"id":"https://openalex.org/C32049820","wikidata":"https://www.wikidata.org/wiki/Q319400","display_name":"Modular arithmetic","level":3,"score":0.5968999862670898},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.5257999897003174},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.5238000154495239},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4984999895095825},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.4724999964237213},{"id":"https://openalex.org/C202424057","wikidata":"https://www.wikidata.org/wiki/Q1224829","display_name":"Digital Signature Algorithm","level":4,"score":0.4675000011920929},{"id":"https://openalex.org/C2780595030","wikidata":"https://www.wikidata.org/wiki/Q3860309","display_name":"Multiplication (music)","level":2,"score":0.4487000107765198},{"id":"https://openalex.org/C71743495","wikidata":"https://www.wikidata.org/wiki/Q2845210","display_name":"Power analysis","level":3,"score":0.43939998745918274},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4049000144004822},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.3862000107765198},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3849000036716461},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.3499999940395355},{"id":"https://openalex.org/C152763109","wikidata":"https://www.wikidata.org/wiki/Q1228841","display_name":"Modular exponentiation","level":4,"score":0.3382999897003174},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.33070001006126404},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.32820001244544983},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.32170000672340393},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.2962000072002411},{"id":"https://openalex.org/C197966572","wikidata":"https://www.wikidata.org/wiki/Q915079","display_name":"Elliptic Curve Digital Signature Algorithm","level":5,"score":0.2953000068664551},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2919999957084656},{"id":"https://openalex.org/C3087436","wikidata":"https://www.wikidata.org/wiki/Q1386603","display_name":"Secret sharing","level":3,"score":0.29100000858306885},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.28519999980926514},{"id":"https://openalex.org/C40404285","wikidata":"https://www.wikidata.org/wiki/Q1921816","display_name":"Merkle signature scheme","level":5,"score":0.27239999175071716},{"id":"https://openalex.org/C167615521","wikidata":"https://www.wikidata.org/wiki/Q1048911","display_name":"Elliptic curve cryptography","level":4,"score":0.26669999957084656},{"id":"https://openalex.org/C168941894","wikidata":"https://www.wikidata.org/wiki/Q3483645","display_name":"Ring signature","level":4,"score":0.2637999951839447},{"id":"https://openalex.org/C63361517","wikidata":"https://www.wikidata.org/wiki/Q5645805","display_name":"Hamming weight","level":5,"score":0.2565999925136566},{"id":"https://openalex.org/C163173736","wikidata":"https://www.wikidata.org/wiki/Q3308558","display_name":"Key generation","level":3,"score":0.25619998574256897},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2529999911785126},{"id":"https://openalex.org/C171182647","wikidata":"https://www.wikidata.org/wiki/Q126736","display_name":"Scalar multiplication","level":3,"score":0.25279998779296875}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3733820.3764682","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733820.3764682","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 1st ACM CCS Workshop on Quantum-Resistant Cryptography and Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3733820.3764682","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733820.3764682","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 1st ACM CCS Workshop on Quantum-Resistant Cryptography and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1598238634","https://openalex.org/W1618496890","https://openalex.org/W1628272610","https://openalex.org/W1897761346","https://openalex.org/W2552357046","https://openalex.org/W2588174819","https://openalex.org/W2740580365","https://openalex.org/W2802802828","https://openalex.org/W2897800939","https://openalex.org/W3097085459","https://openalex.org/W3185719672","https://openalex.org/W3213574559","https://openalex.org/W4205093924","https://openalex.org/W4380086689","https://openalex.org/W4387319508","https://openalex.org/W4390856160","https://openalex.org/W4392742552","https://openalex.org/W4393647189","https://openalex.org/W4399396297","https://openalex.org/W4404036270","https://openalex.org/W4406309592"],"related_works":[],"abstract_inverted_index":{"In":[0],"response":[1],"to":[2,15,82,95],"the":[3,87],"emerging":[4],"quantum":[5],"threat,":[6],"new":[7],"post-quantum":[8],"cryptographic":[9],"algorithms":[10],"are":[11],"being":[12],"deployed":[13,14],"replace":[16],"existing":[17],"public-key":[18],"schemes.":[19],"MAYO":[20,52],"is":[21,92],"a":[22,51,59,84,96],"quantum-resistant":[23],"digital":[24],"signature":[25],"scheme":[26],"whose":[27],"small":[28],"keys":[29],"and":[30,66],"signatures":[31],"make":[32],"it":[33],"suitable":[34],"for":[35],"widespread":[36],"adoption,":[37],"including":[38],"on":[39,50],"resource-constrained":[40],"embedded":[41],"platforms.":[42],"This":[43,90],"paper":[44],"demonstrates":[45],"two":[46],"single-trace":[47],"side-channel":[48],"attacks":[49,70],"implementation":[53],"in":[54,86],"ARM":[55],"Cortex-M4":[56],"that":[57],"recover":[58],"secret":[60,98],"key":[61,99],"with":[62],"probabilities":[63],"of":[64],"99.4%":[65],"93.1%,":[67],"respectively.":[68],"Both":[69],"use":[71],"deep":[72],"learning-assisted":[73],"power":[74],"analysis":[75],"exploiting":[76],"information":[77],"leakage":[78],"during":[79],"modular":[80],"multiplication":[81],"reveal":[83],"vector":[85,91],"oil":[88],"space.":[89],"then":[93],"extended":[94],"full":[97],"using":[100],"algebraic":[101],"techniques.":[102]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-02-18T00:00:00"}