{"id":"https://openalex.org/W4386328249","doi":"https://doi.org/10.46586/tches.v2023.i4.262-286","title":"From MLWE to RLWE: A Differential Fault Attack on Randomized & Deterministic Dilithium","display_name":"From MLWE to RLWE: A Differential Fault Attack on Randomized & Deterministic Dilithium","publication_year":2023,"publication_date":"2023-08-31","ids":{"openalex":"https://openalex.org/W4386328249","doi":"https://doi.org/10.46586/tches.v2023.i4.262-286"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2023.i4.262-286","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2023.i4.262-286","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/11166/10605","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/11166/10605","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092724659","display_name":"Mohamed ElGhamrawy","orcid":"https://orcid.org/0009-0000-6797-3075"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]},{"id":"https://openalex.org/I4210123704","display_name":"NXP (Germany)","ror":"https://ror.org/0268h4j55","country_code":"DE","type":"company","lineage":["https://openalex.org/I109147379","https://openalex.org/I4210123704"]},{"id":"https://openalex.org/I70451448","display_name":"HAW Hamburg","ror":"https://ror.org/00fkqwx76","country_code":"DE","type":"education","lineage":["https://openalex.org/I70451448"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mohamed ElGhamrawy","raw_affiliation_strings":["NXP Semiconductors, Hamburg, Germany; Hamburg University of Applied Sciences, Hamburg, Germany","Hamburg University of Applied Sciences, Hamburg, Germany","NXP Semiconductors, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Hamburg, Germany; Hamburg University of Applied Sciences, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I4210123704"]},{"raw_affiliation_string":"Hamburg University of Applied Sciences, Hamburg, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I70451448"]},{"raw_affiliation_string":"NXP Semiconductors, Hamburg, Germany","institution_ids":["https://openalex.org/I4210123704"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025643151","display_name":"Melissa Azouaoui","orcid":"https://orcid.org/0000-0003-2011-5633"},"institutions":[{"id":"https://openalex.org/I4210123704","display_name":"NXP (Germany)","ror":"https://ror.org/0268h4j55","country_code":"DE","type":"company","lineage":["https://openalex.org/I109147379","https://openalex.org/I4210123704"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Melissa Azouaoui","raw_affiliation_strings":["NXP Semiconductors, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Hamburg, Germany","institution_ids":["https://openalex.org/I4210123704"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046595634","display_name":"Olivier Bronchain","orcid":"https://orcid.org/0000-0001-7595-718X"},"institutions":[{"id":"https://openalex.org/I4210134434","display_name":"NXP (Belgium)","ror":"https://ror.org/031v4g827","country_code":"BE","type":"company","lineage":["https://openalex.org/I109147379","https://openalex.org/I4210134434"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Olivier Bronchain","raw_affiliation_strings":["NXP Semiconductors, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Leuven, Belgium","institution_ids":["https://openalex.org/I4210134434"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005514010","display_name":"Joost Renes","orcid":"https://orcid.org/0000-0003-1884-6330"},"institutions":[{"id":"https://openalex.org/I109147379","display_name":"NXP (Netherlands)","ror":"https://ror.org/059be4e97","country_code":"NL","type":"company","lineage":["https://openalex.org/I109147379"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Joost Renes","raw_affiliation_strings":["NXP Semiconductors, Eindhoven, the Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Eindhoven, the Netherlands","institution_ids":["https://openalex.org/I109147379"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101961426","display_name":"Tobias Schneider","orcid":"https://orcid.org/0000-0002-6849-5949"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tobias Schneider","raw_affiliation_strings":["NXP Semiconductors, Gratkorn, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Gratkorn, Austria","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092724660","display_name":"Markus Sch\u00f6nauer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Markus Sch\u00f6nauer","raw_affiliation_strings":["NXP Semiconductors, Gratkorn, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Gratkorn, Austria","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091739968","display_name":"Okan Seker","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123704","display_name":"NXP (Germany)","ror":"https://ror.org/0268h4j55","country_code":"DE","type":"company","lineage":["https://openalex.org/I109147379","https://openalex.org/I4210123704"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Okan Seker","raw_affiliation_strings":["NXP Semiconductors, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Hamburg, Germany","institution_ids":["https://openalex.org/I4210123704"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058133722","display_name":"Christine van Vredendaal","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123704","display_name":"NXP (Germany)","ror":"https://ror.org/0268h4j55","country_code":"DE","type":"company","lineage":["https://openalex.org/I109147379","https://openalex.org/I4210123704"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christine Van Vredendaal","raw_affiliation_strings":["NXP Semiconductors, Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NXP Semiconductors, Hamburg, Germany","institution_ids":["https://openalex.org/I4210123704"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3818,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.84481399,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"262","last_page":"286"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9746999740600586,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dilithium","display_name":"Dilithium","score":0.7927886247634888},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6932448148727417},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.6368512511253357},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.529233455657959},{"id":"https://openalex.org/keywords/fault-injection","display_name":"Fault injection","score":0.5173553824424744},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5137937664985657},{"id":"https://openalex.org/keywords/lattice-based-cryptography","display_name":"Lattice-based cryptography","score":0.452120840549469},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3900083899497986},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3835867643356323},{"id":"https://openalex.org/keywords/quantum","display_name":"Quantum","score":0.35588550567626953},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.35210540890693665},{"id":"https://openalex.org/keywords/quantum-cryptography","display_name":"Quantum cryptography","score":0.27463263273239136},{"id":"https://openalex.org/keywords/quantum-information","display_name":"Quantum information","score":0.1941700279712677},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.15667760372161865},{"id":"https://openalex.org/keywords/quantum-mechanics","display_name":"Quantum mechanics","score":0.13187521696090698},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07832014560699463}],"concepts":[{"id":"https://openalex.org/C2775951159","wikidata":"https://www.wikidata.org/wiki/Q1189242","display_name":"Dilithium","level":4,"score":0.7927886247634888},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6932448148727417},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.6368512511253357},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.529233455657959},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.5173553824424744},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5137937664985657},{"id":"https://openalex.org/C137660015","wikidata":"https://www.wikidata.org/wiki/Q6497083","display_name":"Lattice-based cryptography","level":5,"score":0.452120840549469},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3900083899497986},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3835867643356323},{"id":"https://openalex.org/C84114770","wikidata":"https://www.wikidata.org/wiki/Q46344","display_name":"Quantum","level":2,"score":0.35588550567626953},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.35210540890693665},{"id":"https://openalex.org/C144901912","wikidata":"https://www.wikidata.org/wiki/Q471906","display_name":"Quantum cryptography","level":4,"score":0.27463263273239136},{"id":"https://openalex.org/C169699857","wikidata":"https://www.wikidata.org/wiki/Q2122243","display_name":"Quantum information","level":3,"score":0.1941700279712677},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.15667760372161865},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.13187521696090698},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07832014560699463},{"id":"https://openalex.org/C145148216","wikidata":"https://www.wikidata.org/wiki/Q36496","display_name":"Ion","level":2,"score":0.0},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0},{"id":"https://openalex.org/C118629725","wikidata":"https://www.wikidata.org/wiki/Q2686738","display_name":"Deprotonation","level":3,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2023.i4.262-286","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2023.i4.262-286","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/11166/10605","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:942087e1236247a1b250361baa3d3d0c","is_oa":true,"landing_page_url":"https://doaj.org/article/942087e1236247a1b250361baa3d3d0c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2023, Iss 4 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2023.i4.262-286","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2023.i4.262-286","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/11166/10605","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4386328249.pdf","grobid_xml":"https://content.openalex.org/works/W4386328249.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W70060353","https://openalex.org/W80562455","https://openalex.org/W1839785783","https://openalex.org/W1989510734","https://openalex.org/W2007466965","https://openalex.org/W2026129593","https://openalex.org/W2050689197","https://openalex.org/W2071825329","https://openalex.org/W2098290658","https://openalex.org/W2141040012","https://openalex.org/W2155998973","https://openalex.org/W2400700555","https://openalex.org/W2494078997","https://openalex.org/W2560054270","https://openalex.org/W2578021477","https://openalex.org/W2768572961","https://openalex.org/W2894517745","https://openalex.org/W2898787455","https://openalex.org/W2912554321","https://openalex.org/W2921053303","https://openalex.org/W2926259481","https://openalex.org/W2965935173","https://openalex.org/W2985429397","https://openalex.org/W3013288840","https://openalex.org/W3023546199","https://openalex.org/W3095245686","https://openalex.org/W3115739041","https://openalex.org/W3206090670","https://openalex.org/W4221162107","https://openalex.org/W4229637647","https://openalex.org/W4256477176","https://openalex.org/W4283386839","https://openalex.org/W4312807212","https://openalex.org/W4379384493"],"related_works":["https://openalex.org/W2951963551","https://openalex.org/W4385711937","https://openalex.org/W83665960","https://openalex.org/W1566796882","https://openalex.org/W3028997939","https://openalex.org/W1579351653","https://openalex.org/W2786453435","https://openalex.org/W1526301524","https://openalex.org/W4200446781","https://openalex.org/W2752419988"],"abstract_inverted_index":{"The":[0],"post-quantum":[1,19],"digital":[2],"signature":[3,169],"scheme":[4],"CRYSTALS-Dilithium":[5],"has":[6],"been":[7],"recently":[8],"selected":[9],"by":[10,133],"the":[11,58,67,75,87,118,122,127,155,168],"NIST":[12],"for":[13],"standardization.":[14],"Implementing":[15],"CRYSTALSDilithium,":[16],"and":[17,40,48,60,69,82,150],"other":[18],"cryptography":[20],"schemes,":[21],"on":[22,66,94,117],"embedded":[23],"devices":[24],"raises":[25],"a":[26,62,78,96,140,164],"new":[27],"set":[28],"of":[29,38,72],"challenges,":[30],"including":[31],"ones":[32],"related":[33,45],"to":[34,46,85,95,161],"performance":[35],"in":[36,151],"terms":[37],"speed":[39],"memory":[41],"requirements,":[42],"but":[43],"also":[44],"side-channel":[47],"fault":[49,64],"injection":[50],"attacks":[51],"security.":[52],"In":[53],"this":[54,148],"work,":[55],"we":[56,110,143],"investigated":[57],"latter":[59],"describe":[61],"differential":[63],"attack":[65,76,149],"randomized":[68],"deterministic":[70],"versions":[71],"CRYSTALS-Dilithium.":[73],"Notably,":[74],"requires":[77],"few":[79],"instructions":[80],"skips":[81],"is":[83,92],"able":[84],"reduce":[86],"MLWE":[88],"problem":[89,99],"that":[90,154],"Dilithium":[91],"based":[93],"smaller":[97],"RLWE":[98],"which":[100],"can":[101,158],"be":[102,159],"practically":[103],"solved":[104],"with":[105,129],"lattice":[106],"reduction":[107],"techniques.":[108],"Accordingly,":[109],"demonstrated":[111],"key":[112],"recoveries":[113],"using":[114,126],"hints":[115],"extracted":[116],"secret":[119],"keys":[120],"from":[121],"same":[123],"faulted":[124],"signatures":[125],"LWE":[128],"side-information":[130],"framework":[131],"introduced":[132],"Dachman-Soled":[134],"et":[135],"al.":[136],"at":[137],"CRYPTO\u201920.":[138],"As":[139],"final":[141],"contribution,":[142],"proposed":[144],"algorithmic":[145],"countermeasures":[146],"against":[147],"particular":[152],"showed":[153],"second":[156],"one":[157],"parameterized":[160],"only":[162],"induce":[163],"negligible":[165],"overhead":[166],"over":[167],"generation.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":2}],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2023-09-01T00:00:00"}