{"id":"https://openalex.org/W4411157927","doi":"https://doi.org/10.46586/tches.v2025.i3.317-360","title":"All You Need is XOR-Convolution: A Generalized Higher-Order Side-Channel Attack with Application to XEX/XE-based Encryptions","display_name":"All You Need is XOR-Convolution: A Generalized Higher-Order Side-Channel Attack with Application to XEX/XE-based Encryptions","publication_year":2025,"publication_date":"2025-06-05","ids":{"openalex":"https://openalex.org/W4411157927","doi":"https://doi.org/10.46586/tches.v2025.i3.317-360"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2025.i3.317-360","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i3.317-360","pdf_url":"https://ojs.ub.rub.de/index.php/TCHES/article/download/12219/12026","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.ub.rub.de/index.php/TCHES/article/download/12219/12026","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034718952","display_name":"Rei Ueno","orcid":"https://orcid.org/0000-0002-9754-6792"},"institutions":[{"id":"https://openalex.org/I22299242","display_name":"Kyoto University","ror":"https://ror.org/02kpeqv85","country_code":"JP","type":"education","lineage":["https://openalex.org/I22299242"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Rei Ueno","raw_affiliation_strings":["Kyoto University, Yoshidahommachi, Sakyo-ku, Kyoto-shi, Kyoto 606\u20138501, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyoto University, Yoshidahommachi, Sakyo-ku, Kyoto-shi, Kyoto 606\u20138501, Japan","institution_ids":["https://openalex.org/I22299242"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004043077","display_name":"A. S. Ito","orcid":"https://orcid.org/0000-0002-4602-7570"},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Akira Ito","raw_affiliation_strings":["NTT Social Informatics Laboratories, Nippon Telegraph and Telephone Corporation, 3\u20139\u201311 Midori-cho, Musashino-shi, Tokyo, 180-8585, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Social Informatics Laboratories, Nippon Telegraph and Telephone Corporation, 3\u20139\u201311 Midori-cho, Musashino-shi, Tokyo, 180-8585, Japan","institution_ids":["https://openalex.org/I2251713219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026273868","display_name":"Yosuke Todo","orcid":"https://orcid.org/0000-0002-6839-4777"},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yosuke Todo","raw_affiliation_strings":["NTT Social Informatics Laboratories, Nippon Telegraph and Telephone Corporation, 3\u20139\u201311 Midori-cho, Musashino-shi, Tokyo, 180-8585, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Social Informatics Laboratories, Nippon Telegraph and Telephone Corporation, 3\u20139\u201311 Midori-cho, Musashino-shi, Tokyo, 180-8585, Japan","institution_ids":["https://openalex.org/I2251713219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069272240","display_name":"Akiko Inoue","orcid":"https://orcid.org/0000-0002-0173-7245"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Akiko Inoue","raw_affiliation_strings":["NEC Secure System Platform Laboratories, 1753 Shimonumabe, Nakahara, Kawasaki, Kanagawa 211\u20138666, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Secure System Platform Laboratories, 1753 Shimonumabe, Nakahara, Kawasaki, Kanagawa 211\u20138666, Japan","institution_ids":["https://openalex.org/I118347220"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021671673","display_name":"Kazuhiko Minematsu","orcid":"https://orcid.org/0000-0002-3427-6772"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazuhiko Minematsu","raw_affiliation_strings":["NEC Secure System Platform Laboratories, 1753 Shimonumabe, Nakahara, Kawasaki, Kanagawa 211\u20138666, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Secure System Platform Laboratories, 1753 Shimonumabe, Nakahara, Kawasaki, Kanagawa 211\u20138666, Japan","institution_ids":["https://openalex.org/I118347220"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056305013","display_name":"Hiroki Ishikawa","orcid":"https://orcid.org/0000-0001-9330-4561"},"institutions":[{"id":"https://openalex.org/I201537933","display_name":"Tohoku University","ror":"https://ror.org/01dq60k83","country_code":"JP","type":"education","lineage":["https://openalex.org/I201537933"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hibiki Ishikawa","raw_affiliation_strings":["Tohoku University, 2\u20131\u20131 Katahira, Aoba-ku, Sendai-shi, Miyagi, 980-8577, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tohoku University, 2\u20131\u20131 Katahira, Aoba-ku, Sendai-shi, Miyagi, 980-8577, Japan","institution_ids":["https://openalex.org/I201537933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069532722","display_name":"Naofumi Homma","orcid":"https://orcid.org/0000-0003-0864-3126"},"institutions":[{"id":"https://openalex.org/I201537933","display_name":"Tohoku University","ror":"https://ror.org/01dq60k83","country_code":"JP","type":"education","lineage":["https://openalex.org/I201537933"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Naofumi Homma","raw_affiliation_strings":["Tohoku University, 2\u20131\u20131 Katahira, Aoba-ku, Sendai-shi, Miyagi, 980-8577, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tohoku University, 2\u20131\u20131 Katahira, Aoba-ku, Sendai-shi, Miyagi, 980-8577, Japan","institution_ids":["https://openalex.org/I201537933"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.06094731,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"3","first_page":"317","last_page":"360"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9775999784469604,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9757999777793884,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.8018609881401062},{"id":"https://openalex.org/keywords/convolution","display_name":"Convolution (computer science)","score":0.6965750455856323},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.6691562533378601},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.5780660510063171},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4984102249145508},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.371057391166687},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.3675362467765808},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3384665250778198},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.24115347862243652},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.20063340663909912},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10410946607589722},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.08016461133956909}],"concepts":[{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.8018609881401062},{"id":"https://openalex.org/C45347329","wikidata":"https://www.wikidata.org/wiki/Q5166604","display_name":"Convolution (computer science)","level":3,"score":0.6965750455856323},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.6691562533378601},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.5780660510063171},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4984102249145508},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.371057391166687},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.3675362467765808},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3384665250778198},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.24115347862243652},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.20063340663909912},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10410946607589722},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.08016461133956909},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2025.i3.317-360","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i3.317-360","pdf_url":"https://ojs.ub.rub.de/index.php/TCHES/article/download/12219/12026","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c9f2e39603ba46288c8bc5de40ba5ff4","is_oa":true,"landing_page_url":"https://doaj.org/article/c9f2e39603ba46288c8bc5de40ba5ff4","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2025, Iss 3 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2025.i3.317-360","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i3.317-360","pdf_url":"https://ojs.ub.rub.de/index.php/TCHES/article/download/12219/12026","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6385471558","display_name":"Development of highly secure and reliable authentication system based on physically unclonable hardware identifier","funder_award_id":"20K19765","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G648744600","display_name":"Formal design and analysis of security hardare: evolution and beyond","funder_award_id":"21H04867","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G6707326548","display_name":"Fundamental theory for deep-learning based security evaluation of cryptographic implementation and its countermeasure against implementation attacks","funder_award_id":"25K03117","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411157927.pdf","grobid_xml":"https://content.openalex.org/works/W4411157927.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4323824501","https://openalex.org/W2355552010","https://openalex.org/W2136687465","https://openalex.org/W3016859066","https://openalex.org/W5280335","https://openalex.org/W4200321003","https://openalex.org/W4400339423","https://openalex.org/W3215861253","https://openalex.org/W4252980856","https://openalex.org/W4200163172"],"abstract_inverted_index":{"The":[0,123,159,214,243],"XEX/XE":[1,59,288],"scheme":[2],"has":[3,253],"been":[4,29],"widely":[5],"used":[6],"to":[7,57,73,88,173,175,181],"realize":[8],"authenticated":[9],"encryptions":[10],"(AEs),":[11],"message":[12],"authentication":[13],"codes":[14],"(MACs),":[15],"and":[16,23,153,239,248,271,297],"storage":[17],"encryptions,":[18],"such":[19],"as":[20,291],"OCB,":[21],"PMAC,":[22],"XTS.":[24],"Although":[25],"these":[26,69],"schemes":[27],"have":[28,38,74,301],"extensively":[30],"deployed":[31],"in":[32,68,143,189,224],"the":[33,58,62,65,90,108,121,129,148,163,167,196,225,234,259,284],"real":[34,157],"world,":[35],"limited":[36],"studies":[37],"evaluated":[39],"side-channel":[40],"attacks":[41,155],"(SCAs)":[42],"on":[43,187,211,218,276],"them.":[44],"In":[45],"this":[46,144],"study,":[47],"we":[48,83,95,193],"propose":[49,96],"an":[50,80,228,294,302],"efficient":[51],"SCA":[52,100,126,150,165,186,198,252,295,305],"that":[53,64,119,162,182,195,283],"can":[54,221],"be":[55,222],"applied":[56],"scheme.":[60],"Despite":[61],"fact":[63],"offset":[66,77,92],"generated":[67],"modes":[70],"is":[71,202,266],"guaranteed":[72],"no":[75],"full":[76],"collision":[78,103,125,139],"with":[79,233],"overwhelming":[81],"probability,":[82],"analyze":[84],"their":[85],"offset-generating":[86],"routines":[87],"exploit":[89],"partial":[91],"collisions.":[93],"Then,":[94],"a":[97,177,184,203,250,272],"new":[98,235],"profiled":[99,215],"named":[101],"XOR-convoluting":[102,116],"analysis":[104,274,281],"(XCCA),":[105],"which":[106,265],"estimates":[107],"sum":[109],"of":[110,131,169,183,205,227,237,262,287],"keys":[111],"from":[112,258,293],"two":[113],"leakages":[114],"by":[115,134,171],"probability":[117],"distributions":[118],"model":[120],"leakages.":[122],"proposed":[124,149,164,197],"effectively":[127],"erases":[128],"effect":[130],"random":[132,285],"offsets":[133,286],"using":[135,156,231],"XOR-convolution,":[136],"whereas":[137],"conventional":[138],"SCAs":[140,210,217],"are":[141],"ineffective":[142],"scenario.":[145],"We":[146],"validated":[147],"through":[151,269],"simulations":[152],"experimental":[154],"traces.":[158],"results":[160],"confirmed":[161],"reduces":[166],"number":[168],"traces":[170],"up":[172],"90%":[174],"achieve":[176],"success":[178],"rate":[179],"identical":[180],"state-of-the-art":[185],"OCB":[188],"TCHES":[190],"2022.":[191],"Furthermore,":[192],"show":[194],"distinguisher":[199,230],"(XCCA":[200],"distinguisher)":[201],"generalization":[204],"higher-order":[206,216,251],"SCAs,":[207],"including":[208],"non-collision":[209],"masked":[212,219],"implementations.":[213],"implementations":[220],"written":[223],"form":[226],"XCCA":[229],"XOR-convolution":[232],"concept":[236],"leaking":[238],"target":[240],"selection":[241],"functions.":[242],"generalized":[244],"representation":[245],"clarifies":[246],"how":[247],"why":[249],"better":[254],"or":[255],"worse":[256],"performance":[257],"theoretical":[260],"viewpoint":[261],"noise":[263],"amplification,":[264],"also":[267],"demonstrated":[268],"experiments":[270],"spectrum":[273],"based":[275],"Walsh\u2013Hadamard":[277],"transform":[278],"(WHT).":[279],"Our":[280],"reveals":[282],"would":[289,300],"work":[290],"masking":[292],"perspective,":[296],"XEX/XE-based":[298],"encryption":[299],"inherent":[303],"first-order":[304],"resilience":[306],"under":[307],"certain":[308],"conditions.":[309]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}