{"id":"https://openalex.org/W4400836815","doi":"https://doi.org/10.46586/tches.v2024.i3.174-199","title":"Correction Fault Attacks on Randomized CRYSTALS-Dilithium","display_name":"Correction Fault Attacks on Randomized CRYSTALS-Dilithium","publication_year":2024,"publication_date":"2024-07-18","ids":{"openalex":"https://openalex.org/W4400836815","doi":"https://doi.org/10.46586/tches.v2024.i3.174-199"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2024.i3.174-199","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2024.i3.174-199","pdf_url":null,"source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"erratum","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.46586/tches.v2024.i3.174-199","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104904976","display_name":"Elisabeth Krahmer","orcid":null},"institutions":[{"id":"https://openalex.org/I137594350","display_name":"Infineon Technologies (Germany)","ror":"https://ror.org/005kw6t15","country_code":"DE","type":"company","lineage":["https://openalex.org/I137594350"]},{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Elisabeth Krahmer","raw_affiliation_strings":["Ruhr-University Bochum, Bochum, Germany; Infineon Technologies AG, Munich, Germany","Infineon Technologies AG, Munich, Germany","Ruhr-University Bochum, Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr-University Bochum, Bochum, Germany; Infineon Technologies AG, Munich, Germany","institution_ids":["https://openalex.org/I137594350","https://openalex.org/I904495901"]},{"raw_affiliation_string":"Infineon Technologies AG, Munich, Germany","institution_ids":["https://openalex.org/I137594350"]},{"raw_affiliation_string":"Ruhr-University Bochum, Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104751024","display_name":"Peter Pessl","orcid":null},"institutions":[{"id":"https://openalex.org/I137594350","display_name":"Infineon Technologies (Germany)","ror":"https://ror.org/005kw6t15","country_code":"DE","type":"company","lineage":["https://openalex.org/I137594350"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Peter Pessl","raw_affiliation_strings":["Infineon Technologies AG, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Infineon Technologies AG, Munich, Germany","institution_ids":["https://openalex.org/I137594350"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037726246","display_name":"Georg Land","orcid":"https://orcid.org/0000-0002-1533-3583"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Georg Land","raw_affiliation_strings":["Ruhr University Bochum, Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum, Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076453092","display_name":"Tim G\u00fcneysu","orcid":"https://orcid.org/0000-0002-3293-4989"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tim G\u00fcneysu","raw_affiliation_strings":["Ruhr University Bochum, Bochum, Germany; DFKI, Bremen, Germany","DFKI, Bremen, Germany","Ruhr University Bochum, Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum, Bochum, Germany; DFKI, Bremen, Germany","institution_ids":["https://openalex.org/I904495901"]},{"raw_affiliation_string":"DFKI, Bremen, Germany","institution_ids":[]},{"raw_affiliation_string":"Ruhr University Bochum, Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"2024","issue":"3","first_page":"174","last_page":"199"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dilithium","display_name":"Dilithium","score":0.7004117369651794},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6150528192520142},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6052919626235962},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.5265724658966064},{"id":"https://openalex.org/keywords/digital-signature","display_name":"Digital signature","score":0.4927556812763214},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.48712942004203796},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.4241163730621338},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.41973716020584106},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3808075487613678},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.08165499567985535},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.07037636637687683}],"concepts":[{"id":"https://openalex.org/C2775951159","wikidata":"https://www.wikidata.org/wiki/Q1189242","display_name":"Dilithium","level":4,"score":0.7004117369651794},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6150528192520142},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6052919626235962},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.5265724658966064},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.4927556812763214},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.48712942004203796},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.4241163730621338},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.41973716020584106},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3808075487613678},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.08165499567985535},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.07037636637687683},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C118629725","wikidata":"https://www.wikidata.org/wiki/Q2686738","display_name":"Deprotonation","level":3,"score":0.0},{"id":"https://openalex.org/C145148216","wikidata":"https://www.wikidata.org/wiki/Q36496","display_name":"Ion","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2024.i3.174-199","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2024.i3.174-199","pdf_url":null,"source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b9e32f1a55b34d97b8dcc44b39abcdf3","is_oa":true,"landing_page_url":"https://doaj.org/article/b9e32f1a55b34d97b8dcc44b39abcdf3","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2024, Iss 3 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2024.i3.174-199","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2024.i3.174-199","pdf_url":null,"source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5299999713897705,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1506156414","https://openalex.org/W2030231691","https://openalex.org/W2140823840","https://openalex.org/W2560054270","https://openalex.org/W2768572961","https://openalex.org/W2965935173","https://openalex.org/W3095245686","https://openalex.org/W3115739041","https://openalex.org/W3126636527","https://openalex.org/W3183184671","https://openalex.org/W4200446781","https://openalex.org/W4229637647","https://openalex.org/W4283386839","https://openalex.org/W4323320232","https://openalex.org/W4379384493","https://openalex.org/W4386308000","https://openalex.org/W4386328278","https://openalex.org/W4386328296"],"related_works":["https://openalex.org/W3158626348","https://openalex.org/W2950221173","https://openalex.org/W2158491338","https://openalex.org/W2807901368","https://openalex.org/W1988497436","https://openalex.org/W2133733652","https://openalex.org/W2136354148","https://openalex.org/W1497363736","https://openalex.org/W2951963551","https://openalex.org/W4385711937"],"abstract_inverted_index":{"After":[0,122],"NIST\u2019s":[1],"selection":[2],"of":[3,41,100,112,176,255],"Dilithium":[4,42,282],"as":[5,71,211,213],"the":[6,39,49,66,72,98,110,120,161,170,177,205,249,253,316,323],"primary":[7],"future":[8],"standard":[9,273],"for":[10,51,136,192,203,318],"quantum-secure":[11],"digital":[12],"signatures,":[13,218],"increased":[14,319],"efforts":[15,321],"to":[16,24,43,61,134,160,186,238,286],"understand":[17],"its":[18],"implementation":[19,63],"security":[20],"properties":[21],"are":[22,33,95,261,311],"required":[23,256],"enable":[25],"widespread":[26],"adoption":[27],"on":[28,65,90,97,119,156,270],"embedded":[29],"devices.":[30],"Concretely,":[31],"there":[32],"still":[34],"many":[35,124,308],"open":[36],"questions":[37],"regarding":[38,199],"susceptibility":[40],"fault":[44,88,159,242,288,300],"attacks.":[45],"This":[46],"is":[47,132,174,183],"especially":[48],"case":[50],"Dilithium\u2019s":[52],"randomized":[53,162,281],"(or":[54],"hedged)":[55],"signing":[56],"mode,":[57,68],"which,":[58],"likely":[59,312],"due":[60],"devastating":[62],"attacks":[64,89,94,206,234,277],"deterministic":[67],"was":[69],"selected":[70],"default":[73],"by":[74,83,223],"NIST.This":[75],"work":[76],"takes":[77],"steps":[78],"towards":[79],"closing":[80],"this":[81,193],"gap":[82],"presenting":[84],"two":[85],"new":[86],"key-recovery":[87],"randomized/hedged":[91],"Dilithium.":[92],"Both":[93],"based":[96,155],"idea<":[99],"correcting":[101],"faulty":[102,125,217,257],"signatures":[103,126],"after":[104],"signing.":[105],"A":[106],"successful":[107],"correction":[108,129],"yields":[109],"value":[111],"a":[113,151,225,245],"secret":[114],"intermediate":[115],"that":[116,202,279,290,298],"carries":[117],"information":[118],"key.":[121,179],"gathering":[123],"and":[127,189,215,252,267,297],"corresponding":[128],"values,":[130],"it":[131,182],"possible":[133],"solve":[135],"thesigning":[137],"key":[138,208],"via":[139],"either":[140],"simple":[141],"linear":[142],"algebra":[143],"or":[144],"lattice-reduction":[145],"techniques.":[146],"Our":[147,164],"first":[148],"attack":[149,154,166],"extends":[150],"previously":[152],"published":[153],"an":[157,271],"instruction-skipping":[158],"setting.":[163],"second":[165],"injects":[167],"faults":[168,266],"in":[169,248,322],"matrix":[171],"A,":[172],"which":[173],"part":[175],"public":[178],"As":[180],"such,":[181],"not":[184,195],"sensitive":[185,305],"side-channel":[187,304],"leakage":[188],"has,":[190],"potentially":[191],"reason,":[194],"seen":[196],"prior":[197],"analysis":[198,320],"faults.We":[200],"show":[201],"Dilithium2,":[204],"allow":[207],"recovery":[209],"with":[210,219,244],"little":[212],"1024":[214],"512":[216],"each":[220],"signature":[221],"generated":[222],"injecting":[224],"single":[226],"targeted":[227],"fault.":[228],"We":[229],"also":[230,280,313],"demonstrate":[231,278],"how":[232],"our":[233],"can":[235,283],"be":[236,284,294],"adapted":[237],"circumvent":[239],"several":[240],"popular":[241],"countermeasures":[243,292],"moderate":[246],"increase":[247],"computational":[250],"runtime":[251],"number":[254],"signatures.":[258],"These":[259],"results":[260],"verified":[262],"using":[263],"both":[264],"simulated":[265],"clock":[268],"glitches":[269],"ARM-based":[272],"microcontroller.":[274],"The":[275],"presented":[276],"subject":[285],"diverse":[287],"attacks,":[289],"certain":[291],"might":[293],"easily":[295],"bypassed,":[296],"potential":[299],"targets":[301],"reach":[302],"beyond":[303],"operations.":[306],"Still,":[307],"further":[309],"operations":[310],"susceptible,":[314],"implying":[315],"need":[317],"future.":[324]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":2}],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2025-10-10T00:00:00"}