{"id":"https://openalex.org/W3204480019","doi":"https://doi.org/10.46586/tches.v2021.i4.676-707","title":"A Side-Channel Attack on a Masked IND-CCA Secure Saber KEM Implementation","display_name":"A Side-Channel Attack on a Masked IND-CCA Secure Saber KEM Implementation","publication_year":2021,"publication_date":"2021-08-11","ids":{"openalex":"https://openalex.org/W3204480019","doi":"https://doi.org/10.46586/tches.v2021.i4.676-707","mag":"3204480019"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2021.i4.676-707","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i4.676-707","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/9079/8666","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/9079/8666","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069027667","display_name":"Kalle Ngo","orcid":"https://orcid.org/0000-0002-9842-2038"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Kalle Ngo","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011438358","display_name":"Elena Dubrova","orcid":"https://orcid.org/0000-0001-7382-9408"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Elena Dubrova","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011896992","display_name":"Qian Guo","orcid":"https://orcid.org/0000-0003-0930-3174"},"institutions":[{"id":"https://openalex.org/I187531555","display_name":"Lund University","ror":"https://ror.org/012a77v79","country_code":"SE","type":"education","lineage":["https://openalex.org/I187531555"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Qian Guo","raw_affiliation_strings":["Lund University (LTH), Lund, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lund University (LTH), Lund, Sweden","institution_ids":["https://openalex.org/I187531555"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019956193","display_name":"Thomas Johansson","orcid":"https://orcid.org/0000-0003-1798-570X"},"institutions":[{"id":"https://openalex.org/I187531555","display_name":"Lund University","ror":"https://ror.org/012a77v79","country_code":"SE","type":"education","lineage":["https://openalex.org/I187531555"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Thomas Johansson","raw_affiliation_strings":["Lund University (LTH), Lund, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lund University (LTH), Lund, Sweden","institution_ids":["https://openalex.org/I187531555"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.5792,"has_fulltext":true,"cited_by_count":87,"citation_normalized_percentile":{"value":0.98105062,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"676","last_page":"707"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7951046228408813},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.6198095679283142},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.4648387134075165},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.38230448961257935},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3507685959339142},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3422299027442932},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.1736152470111847},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.09333416819572449}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7951046228408813},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.6198095679283142},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.4648387134075165},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.38230448961257935},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3507685959339142},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3422299027442932},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.1736152470111847},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.09333416819572449}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.46586/tches.v2021.i4.676-707","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i4.676-707","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/9079/8666","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:eb4eafa56e5e4a2f8e9a6b94b998a962","is_oa":true,"landing_page_url":"https://doaj.org/article/eb4eafa56e5e4a2f8e9a6b94b998a962","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2021, Iss 4 (2021)","raw_type":"article"},{"id":"pmh:oai:lup.lub.lu.se:3cc7371e-3ef7-415c-864b-d7f88212894b","is_oa":false,"landing_page_url":"https://lup.lub.lu.se/record/3cc7371e-3ef7-415c-864b-d7f88212894b","pdf_url":null,"source":{"id":"https://openalex.org/S4306400536","display_name":"Lund University Publications (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ISSN: 2569-2925","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2021.i4.676-707","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i4.676-707","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/9079/8666","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3103515943","display_name":null,"funder_award_id":"2019-04166","funder_id":"https://openalex.org/F4320322581","funder_display_name":"Vetenskapsr\u00e5det"},{"id":"https://openalex.org/G4140816807","display_name":null,"funder_award_id":"2018-04482","funder_id":"https://openalex.org/F4320322581","funder_display_name":"Vetenskapsr\u00e5det"},{"id":"https://openalex.org/G6088888744","display_name":"Secure and private connectivity in smart environments","funder_award_id":"RIT17-0005","funder_id":"https://openalex.org/F4320320940","funder_display_name":"Stiftelsen f\u00f6r\u00a0Strategisk Forskning"},{"id":"https://openalex.org/G712881263","display_name":null,"funder_award_id":"2018-","funder_id":"https://openalex.org/F4320322581","funder_display_name":"Vetenskapsr\u00e5det"}],"funders":[{"id":"https://openalex.org/F4320320940","display_name":"Stiftelsen f\u00f6r\u00a0Strategisk Forskning","ror":"https://ror.org/044wr7g58"},{"id":"https://openalex.org/F4320322581","display_name":"Vetenskapsr\u00e5det","ror":"https://ror.org/03zttf063"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3204480019.pdf","grobid_xml":"https://content.openalex.org/works/W3204480019.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W1562542037","https://openalex.org/W1774054610","https://openalex.org/W1897761346","https://openalex.org/W2137147061","https://openalex.org/W2154909745","https://openalex.org/W2284081067","https://openalex.org/W2293214346","https://openalex.org/W2556867355","https://openalex.org/W2740966734","https://openalex.org/W2746796098","https://openalex.org/W2794781100","https://openalex.org/W2911226959","https://openalex.org/W2935641643","https://openalex.org/W2947163592","https://openalex.org/W2949090085","https://openalex.org/W2951963551","https://openalex.org/W2979160478","https://openalex.org/W2981599111","https://openalex.org/W2990826112","https://openalex.org/W3015791201","https://openalex.org/W3037033594","https://openalex.org/W3038049909","https://openalex.org/W3046851570","https://openalex.org/W3082776805","https://openalex.org/W3092436054","https://openalex.org/W3115714824","https://openalex.org/W3127035137","https://openalex.org/W3159559383","https://openalex.org/W3210769154","https://openalex.org/W4245524709","https://openalex.org/W6637978646","https://openalex.org/W6769809503","https://openalex.org/W6776136807"],"related_works":["https://openalex.org/W4323824501","https://openalex.org/W2051487156","https://openalex.org/W2073681303","https://openalex.org/W4200321003","https://openalex.org/W2355552010","https://openalex.org/W4236373173","https://openalex.org/W2136687465","https://openalex.org/W5280335","https://openalex.org/W4252980856","https://openalex.org/W3215861253"],"abstract_inverted_index":{"In":[0,110],"this":[1],"paper,":[2],"we":[3,112],"present":[4,87],"a":[5,9,36,51,68,88,114],"side-channel":[6],"attack":[7],"on":[8,79,95,126],"first-order":[10],"masked":[11,80,123],"implementation":[12],"of":[13,82],"IND-CCA":[14],"secure":[15],"Saber":[16],"KEM.":[17],"We":[18,85],"show":[19],"how":[20],"to":[21],"recover":[22],"both":[23],"the":[24,28,42,65,107,120],"session":[25],"key":[26,31,91],"and":[27],"long-term":[29],"secret":[30,90],"from":[32,97],"24":[33],"traces":[34],"using":[35],"deep":[37],"neural":[38],"network":[39],"created":[40],"at":[41,60],"profiling":[43,71],"stage.":[44],"The":[45],"proposed":[46],"message":[47],"recovery":[48,92],"approach":[49,93],"learns":[50],"higher-order":[52],"model":[53],"directly,":[54],"without":[55],"explicitly":[56],"extracting":[57],"random":[58],"masks":[59],"each":[61],"execution.":[62],"This":[63],"eliminates":[64],"need":[66],"for":[67,103,122],"fully":[69],"controllable":[70],"device":[72],"which":[73],"is":[74],"required":[75],"in":[76,106,119],"previous":[77],"attacks":[78],"implementations":[81],"LWE/LWR-based":[83],"PKEs/KEMs.":[84],"also":[86],"new":[89],"based":[94],"maps":[96],"error-correcting":[98],"codes":[99],"that":[100],"can":[101],"compensate":[102],"some":[104],"errors":[105],"recovered":[108],"message.":[109],"addition,":[111],"discovered":[113],"previously":[115],"unknown":[116],"leakage":[117],"point":[118],"primitive":[121],"logical":[124],"shifting":[125],"arithmetic":[127],"shares.":[128]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":24},{"year":2022,"cited_by_count":21},{"year":2021,"cited_by_count":6}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}