{"id":"https://openalex.org/W7167688079","doi":"https://doi.org/10.48550/arxiv.2607.05921","title":"From Regression to Prior-Aware Inference: Solving the ILWE Family in Randomness Leakage Attacks against ML-DSA","display_name":"From Regression to Prior-Aware Inference: Solving the ILWE Family in Randomness Leakage Attacks against ML-DSA","publication_year":2026,"publication_date":"2026-07-07","ids":{"openalex":"https://openalex.org/W7167688079","doi":"https://doi.org/10.48550/arxiv.2607.05921"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.05921","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.05921","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.05921","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055477377","display_name":"Peiheng Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Peiheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140252213","display_name":"Yuejun Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yuejun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101437650","display_name":"Wenjie Cheng","orcid":"https://orcid.org/0000-0003-4093-7511"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cheng, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023830852","display_name":"Muye Li","orcid":"https://orcid.org/0000-0002-1277-1967"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Muye","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064150408","display_name":"Honglin Shao","orcid":"https://orcid.org/0000-0003-3945-415X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shao, Honglin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140292338","display_name":"Yongbin Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Yongbin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.7904000282287598,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.7904000282287598,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.03460000082850456,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.03180000185966492,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/randomness","display_name":"Randomness","score":0.8831999897956848},{"id":"https://openalex.org/keywords/solver","display_name":"Solver","score":0.583299994468689},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.47200000286102295},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.45739999413490295},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.35339999198913574},{"id":"https://openalex.org/keywords/digital-signature","display_name":"Digital signature","score":0.33059999346733093}],"concepts":[{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.8831999897956848},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.583299994468689},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5629000067710876},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.47200000286102295},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.45739999413490295},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3959999978542328},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.391400009393692},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.35339999198913574},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.33059999346733093},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3174999952316284},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3109999895095825},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.29350000619888306},{"id":"https://openalex.org/C2780378346","wikidata":"https://www.wikidata.org/wiki/Q1349983","display_name":"Leak","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C18017163","wikidata":"https://www.wikidata.org/wiki/Q13560113","display_name":"Randomness tests","level":3,"score":0.28139999508857727},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25220000743865967}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.05921","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.05921","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.05921","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.05921","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6536155343055725,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"ML-DSA":[0],"is":[1,88],"a":[2,64,85,140,189,225,228,237,248],"representative":[3],"lattice-based":[4],"signature":[5],"scheme":[6],"standardized":[7],"by":[8,104,209,227,236],"NIST.":[9],"It":[10],"relies":[11],"on":[12,100,130,149,192,199,251,265],"signing":[13],"randomness":[14,57,255],"and":[15,40,73,83,125,166,235,258],"rejection":[16],"sampling":[17],"to":[18,90,143,211,217],"ensure":[19],"that":[20,185],"released":[21],"signatures":[22,46,75],"are":[23,76],"statistically":[24],"independent":[25],"of":[26,116,180,206,214,230,239],"the":[27,92,101,114,119,160,186,193,204,218],"secret":[28,52,93],"key.":[29,94],"Practical":[30],"implementations,":[31],"however,":[32],"may":[33],"leak":[34],"partial":[35,71],"information":[36,72],"about":[37],"this":[38,136,245],"randomness,":[39],"such":[41,106],"leakage":[42,58,110,256],"can":[43,60],"transform":[44],"public":[45,74],"into":[47,79],"ILWE-type":[48],"problems,":[49],"resulting":[50],"in":[51,68,118,232,241,254],"key":[53],"disclosure":[54],"risks.":[55],"Such":[56],"attack":[59],"be":[61],"formulated":[62],"as":[63],"two-stage":[65],"key-recovery":[66],"procedure,":[67],"which":[69],"leaked":[70],"first":[77,102],"transformed":[78],"an":[80],"ILWE-family":[81,151],"instance,":[82],"then":[84],"recovery":[86,147,195],"solver":[87,117,187],"applied":[89],"recover":[91],"Existing":[95],"work":[96,246],"has":[97,188],"mainly":[98],"focused":[99],"stage":[103,122],"constructing":[105],"instances":[107],"under":[108,170],"different":[109,146,171,252],"models.":[111],"By":[112],"contrast,":[113],"role":[115],"subsequent":[120],"instance-solving":[121],"remains":[123],"under-explored,":[124],"existing":[126],"attacks":[127],"often":[128],"rely":[129],"ad-hoc":[131],"model-specific":[132],"solvers.":[133,181],"To":[134],"address":[135],"gap,":[137],"we":[138,176],"propose":[139],"unified":[141],"framework":[142,154],"systematically":[144],"evaluate":[145],"solvers":[148,253],"leakage-derived":[150],"instances.":[152],"The":[153],"covers":[155],"three":[156,178],"ILWE":[157,164,168],"instances,":[158],"including":[159],"ordinary":[161],"ILWE,":[162],"Fiat-Shamir":[163],"(FS-ILWE)":[165],"Concealed":[167],"(CILWE)":[169],"scenarios.":[172],"Within":[173],"our":[174],"framework,":[175],"explore":[177],"classes":[179],"Our":[182],"experiments":[183],"show":[184],"significant":[190],"impact":[191],"secret-key":[194],"efficiency.":[196],"In":[197],"particular,":[198],"FS-ILWE,":[200],"prior-aware":[201],"discrete-inference":[202],"reduces":[203],"number":[205],"informative":[207],"relations":[208],"one":[210],"two":[212],"orders":[213],"magnitude":[215],"compared":[216],"baselines:":[219],"Compared":[220],"with":[221],"OLS,":[222],"BP":[223],"constitutes":[224],"reduction":[226],"factor":[229,238],"15.4x-64.9x":[231],"noise-free":[233],"settings,":[234],"10.5x-73.9x":[240],"noisy":[242],"settings.":[243],"Overall,":[244],"provides":[247],"systematic":[249],"evaluation":[250],"attacks,":[257],"presents":[259],"new":[260],"benchmarks":[261],"for":[262],"future":[263],"analysis":[264],"ML-DSA.":[266]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-09T00:00:00"}