{"id":"https://openalex.org/W3202360051","doi":"https://doi.org/10.46586/tches.v2021.i4.173-214","title":"Masking Kyber: First- and Higher-Order Implementations","display_name":"Masking Kyber: First- and Higher-Order Implementations","publication_year":2021,"publication_date":"2021-08-11","ids":{"openalex":"https://openalex.org/W3202360051","doi":"https://doi.org/10.46586/tches.v2021.i4.173-214","mag":"3202360051"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2021.i4.173-214","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i4.173-214","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/9064/8651","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/9064/8651","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012762741","display_name":"Joppe W. Bos","orcid":"https://orcid.org/0000-0003-1010-8157"},"institutions":[{"id":"https://openalex.org/I109147379","display_name":"NXP (Netherlands)","ror":"https://ror.org/059be4e97","country_code":"NL","type":"company","lineage":["https://openalex.org/I109147379"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Joppe W. Bos","raw_affiliation_strings":["NXP Semiconductors, Eindhoven, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Eindhoven, Netherlands","institution_ids":["https://openalex.org/I109147379"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009576157","display_name":"Marc Gourjon","orcid":"https://orcid.org/0000-0002-2580-801X"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]},{"id":"https://openalex.org/I4210123704","display_name":"NXP (Germany)","ror":"https://ror.org/0268h4j55","country_code":"DE","type":"company","lineage":["https://openalex.org/I109147379","https://openalex.org/I4210123704"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marc Gourjon","raw_affiliation_strings":["NXP Semiconductors, Eindhoven, Netherlands; Hamburg University of Technology, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Eindhoven, Netherlands; Hamburg University of Technology, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I4210123704"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005514010","display_name":"Joost Renes","orcid":"https://orcid.org/0000-0003-1884-6330"},"institutions":[{"id":"https://openalex.org/I109147379","display_name":"NXP (Netherlands)","ror":"https://ror.org/059be4e97","country_code":"NL","type":"company","lineage":["https://openalex.org/I109147379"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Joost Renes","raw_affiliation_strings":["NXP Semiconductors, Eindhoven, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Eindhoven, Netherlands","institution_ids":["https://openalex.org/I109147379"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101961426","display_name":"Tobias Schneider","orcid":"https://orcid.org/0000-0002-6849-5949"},"institutions":[{"id":"https://openalex.org/I109147379","display_name":"NXP (Netherlands)","ror":"https://ror.org/059be4e97","country_code":"NL","type":"company","lineage":["https://openalex.org/I109147379"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Tobias Schneider","raw_affiliation_strings":["NXP Semiconductors, Eindhoven, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Eindhoven, Netherlands","institution_ids":["https://openalex.org/I109147379"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058133722","display_name":"Christine van Vredendaal","orcid":null},"institutions":[{"id":"https://openalex.org/I109147379","display_name":"NXP (Netherlands)","ror":"https://ror.org/059be4e97","country_code":"NL","type":"company","lineage":["https://openalex.org/I109147379"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Christine Van Vredendaal","raw_affiliation_strings":["NXP Semiconductors, Eindhoven, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Eindhoven, Netherlands","institution_ids":["https://openalex.org/I109147379"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.2626,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":{"value":0.87832808,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"2021","issue":null,"first_page":"173","last_page":"214"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10789","display_name":"Interactive and Immersive Displays","score":0.25609999895095825,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10789","display_name":"Interactive and Immersive Displays","score":0.25609999895095825,"subfield":{"id":"https://openalex.org/subfields/1709","display_name":"Human-Computer Interaction"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.7392067909240723},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7108306288719177},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.6226641535758972},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.5438275337219238},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.25014781951904297},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1199401319026947},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.05778118968009949},{"id":"https://openalex.org/keywords/art","display_name":"Art","score":0.05038130283355713}],"concepts":[{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.7392067909240723},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7108306288719177},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.6226641535758972},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.5438275337219238},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.25014781951904297},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1199401319026947},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.05778118968009949},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.05038130283355713},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.46586/tches.v2021.i4.173-214","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i4.173-214","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/9064/8651","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"mag:3202360051","is_oa":false,"landing_page_url":"https://eprint.iacr.org/2021/483.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S2764847869","display_name":"IACR Cryptology ePrint Archive","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":["https://openalex.org/P4322614454"],"host_organization_lineage_names":["Cryptology ePrint Archive"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Cryptology ePrint Archive","raw_type":null},{"id":"pmh:oai:doaj.org/article:b0c41c03fee348d98bc3b442db6ada4c","is_oa":true,"landing_page_url":"https://doaj.org/article/b0c41c03fee348d98bc3b442db6ada4c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2021, Iss 4 (2021)","raw_type":"article"},{"id":"pmh:oai:null:11420/10973","is_oa":true,"landing_page_url":"http://hdl.handle.net/11420/10973","pdf_url":null,"source":{"id":"https://openalex.org/S4306401751","display_name":"tub.dok (Hamburg University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I884043246","host_organization_name":"Hamburg University of Technology","host_organization_lineage":["https://openalex.org/I884043246"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"},{"id":"doi:10.15480/882.3915","is_oa":true,"landing_page_url":"https://doi.org/10.15480/882.3915","pdf_url":null,"source":{"id":"https://openalex.org/S7407052987","display_name":"TUHH Open Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I884043246","host_organization_name":"Hamburg University of Technology","host_organization_lineage":["https://openalex.org/I884043246"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.46586/tches.v2021.i4.173-214","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i4.173-214","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/9064/8651","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3202360051.pdf","grobid_xml":"https://content.openalex.org/works/W3202360051.grobid-xml"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W96383189","https://openalex.org/W191000419","https://openalex.org/W587262091","https://openalex.org/W1579862686","https://openalex.org/W1592625985","https://openalex.org/W1592811212","https://openalex.org/W1595771334","https://openalex.org/W1607264302","https://openalex.org/W1613874182","https://openalex.org/W1675339804","https://openalex.org/W1897761346","https://openalex.org/W1985439922","https://openalex.org/W2135205181","https://openalex.org/W2152926062","https://openalex.org/W2168676717","https://openalex.org/W2412886904","https://openalex.org/W2479727864","https://openalex.org/W2536698892","https://openalex.org/W2621165181","https://openalex.org/W2740580365","https://openalex.org/W2740966734","https://openalex.org/W2785011856","https://openalex.org/W2788574538","https://openalex.org/W2794781100","https://openalex.org/W2796314191","https://openalex.org/W2798219476","https://openalex.org/W2806649078","https://openalex.org/W2866028610","https://openalex.org/W2935641643","https://openalex.org/W2947163592","https://openalex.org/W2951078157","https://openalex.org/W2953524555","https://openalex.org/W2970990324","https://openalex.org/W2979160478","https://openalex.org/W2988496150","https://openalex.org/W3004433901","https://openalex.org/W3029450129","https://openalex.org/W3032645156","https://openalex.org/W3037033594","https://openalex.org/W3038049909","https://openalex.org/W3046448699","https://openalex.org/W3046675985","https://openalex.org/W3046851570","https://openalex.org/W3157943737","https://openalex.org/W3178862870","https://openalex.org/W4254706618"],"related_works":["https://openalex.org/W2313679718","https://openalex.org/W3029587854","https://openalex.org/W101112147","https://openalex.org/W2931680411"],"abstract_inverted_index":{"In":[0],"the":[1,5,10,17,21,41,48,64,72,100,138,142,165,183,193,202,210,223,231],"final":[2],"phase":[3],"of":[4,20,40,53,66,77,141,173,205],"post-quantum":[6,79],"cryptography":[7],"standardization":[8],"effort,":[9],"focus":[11],"has":[12],"been":[13,27],"extended":[14],"to":[15,116,127,148,192],"include":[16],"side-channel":[18],"resistance":[19],"candidates.":[22],"While":[23],"some":[24],"schemes":[25],"have":[26],"already":[28],"extensively":[29],"analyzed":[30],"in":[31,71,225],"this":[32,44,69],"regard,":[33],"there":[34],"is":[35,56,86,105,186,212],"no":[36],"such":[37],"study":[38],"yet":[39],"finalist":[42],"Kyber.In":[43],"work,":[45],"we":[46,94,120],"demonstrate":[47],"first":[49,73],"completely":[50],"masked":[51,75,109,130,175],"implementation":[52,76,172,204],"Kyber":[54,176],"which":[55,124],"protected":[57,162],"against":[58,214],"first-":[59],"and":[60,160,168,220],"higher-order":[61,74,97],"attacks.":[62],"To":[63],"best":[65],"our":[67,171,206],"knowledge,":[68],"results":[70,156],"any":[78],"secure":[80],"key":[81],"encapsulation":[82],"mechanism":[83],"algorithm.":[84],"This":[85,104,136,185],"realized":[87],"by":[88],"introducing":[89],"two":[90],"new":[91,207],"techniques.":[92],"First,":[93],"propose":[95,121],"a":[96,108,122,187,226],"algorithm":[98],"for":[99,157],"one-bit":[101],"compression":[102,144],"operation.":[103],"based":[106],"on":[107,164,182,209],"bit-sliced":[110],"binary-search":[111],"that":[112,201],"can":[113],"be":[114,149],"applied":[115],"prime":[117],"moduli.":[118],"Second,":[119],"technique":[123],"enables":[125],"one":[126],"compare":[128],"uncompressed":[129],"polynomials":[131],"with":[132],"compressed":[133],"public":[134],"polynomials.":[135],"avoids":[137],"costly":[139],"masking":[140],"ciphertext":[143],"while":[145],"being":[146],"able":[147],"instantiated":[150],"at":[151],"arbitrary":[152],"orders.We":[153],"show":[154,200],"performance":[155],"first-,":[158],"second-":[159],"third-order":[161],"implementations":[163],"Arm":[166],"Cortex-M0+":[167,211],"Cortex-M4F.":[169,184],"Notably,":[170],"first-order":[174,203],"decapsulation":[177],"requires":[178],"3.1":[179],"million":[180],"cycles":[181],"factor":[188],"3.5":[189],"overhead":[190],"compared":[191],"unprotected":[194],"optimized":[195],"implementationin":[196],"pqm4.":[197],"We":[198],"experimentally":[199],"modules":[208],"hardened":[213],"attacks":[215],"using":[216,230],"100":[217],"000":[218],"traces":[219],"mechanically":[221],"verify":[222],"security":[224],"fine-grained":[227],"leakage":[228],"model":[229],"verification":[232],"tool":[233],"scVerif.":[234]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":2}],"updated_date":"2026-08-13T07:04:57.449891","created_date":"2025-10-10T00:00:00"}