{"id":"https://openalex.org/W4414017196","doi":"https://doi.org/10.46586/tches.v2025.i4.667-710","title":"Masking-Friendly Post-Quantum Signatures in the Threshold-Computation-in-the-Head Framework","display_name":"Masking-Friendly Post-Quantum Signatures in the Threshold-Computation-in-the-Head Framework","publication_year":2025,"publication_date":"2025-09-05","ids":{"openalex":"https://openalex.org/W4414017196","doi":"https://doi.org/10.46586/tches.v2025.i4.667-710"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2025.i4.667-710","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i4.667-710","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12425/12153","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/12425/12153","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043402606","display_name":"Thibauld Feneuil","orcid":"https://orcid.org/0000-0001-9342-2859"},"institutions":[{"id":"https://openalex.org/I4210086502","display_name":"CryptoExperts (France)","ror":"https://ror.org/0030xrh72","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210086502"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Thibauld Feneuil","raw_affiliation_strings":["CryptoExperts, Paris, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CryptoExperts, Paris, France","institution_ids":["https://openalex.org/I4210086502"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075769848","display_name":"Matthieu Rivain","orcid":"https://orcid.org/0000-0002-9855-4161"},"institutions":[{"id":"https://openalex.org/I4210086502","display_name":"CryptoExperts (France)","ror":"https://ror.org/0030xrh72","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210086502"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Matthieu Rivain","raw_affiliation_strings":["CryptoExperts, Paris, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CryptoExperts, Paris, France","institution_ids":["https://openalex.org/I4210086502"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5119549560","display_name":"Auguste Warm\u00e9-Janville","orcid":null},"institutions":[{"id":"https://openalex.org/I4210086502","display_name":"CryptoExperts (France)","ror":"https://ror.org/0030xrh72","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210086502"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Auguste Warm\u00e9-Janville","raw_affiliation_strings":["CryptoExperts, Paris, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CryptoExperts, Paris, France","institution_ids":["https://openalex.org/I4210086502"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210086502"],"apc_list":null,"apc_paid":null,"fwci":3.3735,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.92708771,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"2025","issue":"4","first_page":"667","last_page":"710"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.7194759845733643},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.6102738380432129},{"id":"https://openalex.org/keywords/head","display_name":"Head (geology)","score":0.574550986289978},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5656469464302063},{"id":"https://openalex.org/keywords/quantum","display_name":"Quantum","score":0.5192185044288635},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34768742322921753},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.27616918087005615},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.2705325484275818},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.149777352809906},{"id":"https://openalex.org/keywords/quantum-mechanics","display_name":"Quantum mechanics","score":0.12055391073226929},{"id":"https://openalex.org/keywords/paleontology","display_name":"Paleontology","score":0.05435490608215332},{"id":"https://openalex.org/keywords/art","display_name":"Art","score":0.053620219230651855}],"concepts":[{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.7194759845733643},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.6102738380432129},{"id":"https://openalex.org/C2780312720","wikidata":"https://www.wikidata.org/wiki/Q5689100","display_name":"Head (geology)","level":2,"score":0.574550986289978},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5656469464302063},{"id":"https://openalex.org/C84114770","wikidata":"https://www.wikidata.org/wiki/Q46344","display_name":"Quantum","level":2,"score":0.5192185044288635},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34768742322921753},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.27616918087005615},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.2705325484275818},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.149777352809906},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.12055391073226929},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.05435490608215332},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.053620219230651855},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2025.i4.667-710","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i4.667-710","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12425/12153","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:eaa1f13bac1e4a96961c2349aabbc97e","is_oa":true,"landing_page_url":"https://doaj.org/article/eaa1f13bac1e4a96961c2349aabbc97e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2025, Iss 4 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2025.i4.667-710","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i4.667-710","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12425/12153","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320316512","display_name":"Bpifrance","ror":"https://ror.org/008zkt807"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414017196.pdf","grobid_xml":"https://content.openalex.org/works/W4414017196.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W3081694532","https://openalex.org/W1969211203","https://openalex.org/W3097502728","https://openalex.org/W4411737141","https://openalex.org/W4231775656","https://openalex.org/W1517958729","https://openalex.org/W2092272653","https://openalex.org/W2046435967","https://openalex.org/W1992704972","https://openalex.org/W271627879"],"abstract_inverted_index":{"Side-channel":[0],"attacks":[1],"pose":[2],"significant":[3],"threats":[4],"to":[5,14,46,77,81,103,107,146,276,335,375,393,428],"cryptographic":[6],"implementations,":[7],"which":[8,401],"require":[9],"the":[10,23,31,39,51,65,70,97,117,124,128,156,164,170,182,190,203,218,226,231,234,241,244,247,250,278,293,325,339,344,350,354,382,388,398,405,418],"inclusion":[11,165],"of":[12,25,50,60,87,139,149,158,166,181,193,202,220,225,233,243,249,253,280,314,368,390,408,413,422],"countermeasures":[13],"mitigate":[15],"these":[16,140],"attacks.":[17],"In":[18],"this":[19,213],"work,":[20],"we":[21,36,132,195,311,364,386],"study":[22],"masking":[24,80,98,114,221,300,306,359,430],"state-of-the-art":[26],"post-quantum":[27,52],"signatures":[28,257,313],"based":[29,68,396,433],"on":[30,38,69,261,323,353,397,434],"MPC-in-the-head":[32],"paradigm.":[33],"More":[34],"precisely,":[35],"focus":[37],"recent":[40],"threshold-computation-in-the-head":[41],"(TCitH)":[42],"framework":[43,119],"that":[44,178,318,417],"applies":[45],"some":[47,200,223],"NIST":[48],"candidates":[49],"standardization":[53],"process.":[54],"We":[55,73,172,269],"first":[56],"provide":[57,259],"an":[58,298],"analysis":[59],"side-channel":[61],"attack":[62],"paths":[63],"in":[64,93,121,169,187,222,320,372],"signature":[66,110,160,227,282,346,367,394],"algorithms":[67,205],"TCitH":[71,118,204,256,423],"framework.":[72],"then":[74],"explain":[75],"how":[76,292],"apply":[78],"standard":[79],"achieve":[82,147],"a":[83,134,175,262,271,305,324,330,358,366],"d-probing":[84],"secure":[85],"implementation":[86],"such":[88,437],"schemes,":[89],"with":[90,265,284,329,338,378,404],"performance":[91,279],"scaling":[92],"O(d2),":[94],"for":[95,137,297,304,381],"d":[96,308,361],"order.Our":[99],"main":[100],"contribution":[101],"is":[102,334,416,424],"introduce":[104,133],"different":[105,285,294],"ways":[106],"tweak":[108,136,177],"those":[109],"schemes":[111,395],"towards":[112],"their":[113],"friendliness.":[115],"While":[116,212],"comes":[120],"two":[122],"variants,":[123],"GGM":[125,406,435],"variant":[126,407,421],"and":[127,151,258,287],"Merkle":[129,419],"tree":[130,420],"variant,":[131],"specific":[135],"each":[138],"variants.":[141],"These":[142],"tweaks":[143,286],"allow":[144],"us":[145],"complexities":[148],"O(d)":[150],"O(d":[152],"log":[153],"d)":[154],"at":[155,349],"cost":[157,219],"non-constant":[159],"size,":[161],"caused":[162],"by":[163,198,343],"additional":[167,210],"seeds":[168],"signature.":[171],"also":[173],"propose":[174],"third":[176],"takes":[179],"advantage":[180],"threshold":[183],"secret":[184],"sharing":[185],"used":[186],"TCitH.":[188,409],"With":[189],"right":[191],"choice":[192],"parameters,":[194],"show":[196],"how,":[197],"design,":[199],"parts":[201],"satisfy":[206],"probing":[207],"security":[208],"without":[209],"countermeasures.":[211],"approach":[214],"can":[215],"substantially":[216],"reduce":[217],"part":[224],"algorithm,":[228],"it":[229],"degrades":[230],"soundness":[232],"core":[235],"zero-knowledge":[236],"proof,":[237],"hence":[238],"slightly":[239],"increasing":[240,299],"size":[242],"signature.We":[245],"analyze":[246],"complexity":[248],"masked":[251,348,384],"implementations":[252],"our":[254,391,414],"tweaked":[255],"benchmarks":[260],"RISC-V":[263,327],"platform":[264],"built-in":[266],"hash":[267],"accelerator.":[268],"use":[270],"modular":[272],"benchmarking":[273],"approach,":[274],"allowing":[275],"estimate":[277],"diverse":[281],"instances":[283],"parameters.":[288],"Our":[289],"results":[290],"illustrate":[291],"variants":[295],"scale":[296],"order.":[301],"For":[302,357],"instance,":[303],"order":[307,352,360],"=":[309,362],"3,":[310],"obtain":[312,365],"around":[315],"14":[316],"kB":[317,370],"run":[319],"0.67":[321],"second":[322],"target":[326],"CPU":[328],"250MHz":[331],"frequency.":[332],"This":[333],"be":[336,376],"compared":[337,377],"4.7":[340],"seconds":[341,380],"required":[342],"original":[345],"scheme":[347],"same":[351,355],"platform.":[356],"7,":[363],"17.5":[369],"running":[371],"1.75":[373],"second,":[374],"16":[379],"stardard":[383],"signature.Finally,":[385],"discuss":[387],"extension":[389],"techniques":[392],"VOLE-in-the-Head":[399],"framework,":[400],"shares":[402],"similarities":[403],"One":[410],"key":[411],"takeaway":[412],"work":[415],"inherently":[425],"more":[426],"amenable":[427],"efficient":[429],"than":[431],"frameworks":[432],"trees,":[436],"as":[438],"TCitH-GGM":[439],"or":[440],"VOLE-in-the-Head.":[441]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}