{"id":"https://openalex.org/W7124502348","doi":"https://doi.org/10.46586/tches.v2026.i1.225-249","title":"Fault Attacks on VOLEitH Signature Schemes","display_name":"Fault Attacks on VOLEitH Signature Schemes","publication_year":2026,"publication_date":"2026-01-16","ids":{"openalex":"https://openalex.org/W7124502348","doi":"https://doi.org/10.46586/tches.v2026.i1.225-249"},"language":null,"primary_location":{"id":"doi:10.46586/tches.v2026.i1.225-249","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2026.i1.225-249","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12675/12363","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/12675/12363","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099036650","display_name":"S\u00f6nke Jendral","orcid":null},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"S\u00f6nke Jendral","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011438358","display_name":"Elena Dubrova","orcid":"https://orcid.org/0000-0001-7382-9408"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Elena Dubrova","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I86987016"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.07123267,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":"1","first_page":"225","last_page":"249"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.5322999954223633,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.5322999954223633,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.23800000548362732,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.09319999814033508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6642000079154968},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.524399995803833},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5085999965667725},{"id":"https://openalex.org/keywords/digital-signature","display_name":"Digital signature","score":0.4968999922275543},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.48669999837875366},{"id":"https://openalex.org/keywords/cryptosystem","display_name":"Cryptosystem","score":0.46880000829696655},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.41449999809265137},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.387800008058548}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.71670001745224},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6642000079154968},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6247000098228455},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.524399995803833},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5085999965667725},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.4968999922275543},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.48669999837875366},{"id":"https://openalex.org/C6295992","wikidata":"https://www.wikidata.org/wiki/Q976521","display_name":"Cryptosystem","level":3,"score":0.46880000829696655},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.41449999809265137},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.387800008058548},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.3467999994754791},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.34310001134872437},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.3222000002861023},{"id":"https://openalex.org/C18899389","wikidata":"https://www.wikidata.org/wiki/Q2736593","display_name":"Blind signature","level":4,"score":0.2994999885559082},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2651999890804291},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.260699987411499},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2513999938964844},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.46586/tches.v2026.i1.225-249","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2026.i1.225-249","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12675/12363","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2026.i1.225-249","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2026.i1.225-249","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12675/12363","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5800747275352478,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322327","display_name":"Knut och Alice Wallenbergs Stiftelse","ror":"https://ror.org/004hzzk67"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7124502348.pdf","grobid_xml":"https://content.openalex.org/works/W7124502348.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Ongoing":[0],"efforts":[1],"to":[2,4,92,157,174],"transition":[3],"post-quantum":[5,28],"public-key":[6],"cryptosystems":[7],"have":[8],"created":[9],"the":[10,24,54,63,105,114,126,130,143,161,167,180],"need":[11],"for":[12,31],"algorithms":[13],"with":[14],"a":[15,147],"variety":[16],"of":[17,49,109,116,129,133,141,154,183],"performance":[18,73],"characteristics":[19],"and":[20,37,74,135,166,178],"security":[21,48,79,107,182],"assumptions.":[22,80],"Among":[23],"candidates":[25],"in":[26,88,113,137],"NIST\u2019s":[27],"standardisation":[29],"process":[30],"additional":[32],"digital":[33,185],"signatures":[34],"are":[35],"FAEST":[36,50,134],"SDitH,":[38],"two":[39,122],"Vector":[40],"Oblivious":[41],"Linear":[42],"Evaluation":[43],"in-the-Head":[44],"(VOLEitH)-based":[45],"schemes.":[46,187],"The":[47,68],"is":[51],"based":[52],"on":[53,62,125],"Advanced":[55],"Encryption":[56],"Standard":[57],"(AES),":[58],"while":[59],"SDitH":[60,136],"relies":[61],"regular":[64],"syndrome":[65],"decoding":[66],"problem.":[67],"VOLEitH":[69,158],"paradigm":[70],"enables":[71],"competitive":[72],"signature":[75,111,186],"sizes":[76],"under":[77],"conservative":[78],"However,":[81],"since":[82],"it":[83],"was":[84],"introduced":[85],"relatively":[86],"recently,":[87],"2023,":[89],"its":[90],"resistance":[91],"physical":[93,181],"attacks":[94,124,151,177],"has":[95],"not":[96],"yet":[97],"been":[98],"analysed.":[99],"In":[100],"this":[101],"paper,":[102],"we":[103],"present":[104],"first":[106],"analysis":[108],"VOLEitH-based":[110,184],"schemes":[112],"context":[115],"fault":[117],"injection":[118],"attacks.":[119],"We":[120,170],"demonstrate":[121],"practical":[123],"reference":[127],"implementations":[128],"secondround":[131],"variants":[132],"ARM":[138],"Cortex-M4":[139],"capable":[140],"recovering":[142],"secret":[144],"key":[145],"from":[146],"single":[148],"signature.":[149],"These":[150],"exploit":[152],"vulnerabilities":[153],"components":[155],"specific":[156],"schemes,":[159],"namely":[160],"batch":[162],"all-but-one":[163],"vector":[164],"commitments":[165],"VOLE":[168],"generation.":[169],"also":[171],"propose":[172],"countermeasures":[173],"mitigate":[175],"these":[176],"enhance":[179]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-01-17T00:00:00"}