{"id":"https://openalex.org/W7119466137","doi":"https://doi.org/10.62056/aebngyl7s","title":"Side-Channel Attacks on VOLEitH Signature Schemes","display_name":"Side-Channel Attacks on VOLEitH Signature Schemes","publication_year":2026,"publication_date":"2026-01-08","ids":{"openalex":"https://openalex.org/W7119466137","doi":"https://doi.org/10.62056/aebngyl7s"},"language":"en","primary_location":{"id":"doi:10.62056/aebngyl7s","is_oa":true,"landing_page_url":"https://doi.org/10.62056/aebngyl7s","pdf_url":"https://cic.iacr.org/p/2/4/24/pdf","source":{"id":"https://openalex.org/S4394708374","display_name":"IACR Communications in Cryptology","issn_l":"3006-5496","issn":["3006-5496"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320989","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/P4310320989"],"host_organization_lineage_names":["International Association for Cryptologic Research"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Communications in Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://cic.iacr.org/p/2/4/24/pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099036650","display_name":"S\u00f6nke Jendral","orcid":null},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"S\u00f6nke Jendral","raw_affiliation_strings":["KTH Royal Institute of Technology"],"raw_orcid":"https://orcid.org/0009-0000-0070-9595","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011438358","display_name":"Elena Dubrova","orcid":"https://orcid.org/0000-0001-7382-9408"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Elena Dubrova","raw_affiliation_strings":["KTH Royal Institute of Technology"],"raw_orcid":"https://orcid.org/0000-0001-7382-9408","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology","institution_ids":["https://openalex.org/I86987016"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I86987016"],"apc_list":null,"apc_paid":null,"fwci":24.2102,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.98750048,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"2","issue":"4","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.40059998631477356,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.40059998631477356,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.3790999948978424,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.10490000247955322,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-signature","display_name":"Digital signature","score":0.6251999735832214},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.574999988079071},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5733000040054321},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.5386999845504761},{"id":"https://openalex.org/keywords/blind-signature","display_name":"Blind signature","score":0.5256999731063843},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5138000249862671},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.4309000074863434},{"id":"https://openalex.org/keywords/ring-signature","display_name":"Ring signature","score":0.39649999141693115},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.37310001254081726}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7062000036239624},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6996999979019165},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.6251999735832214},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.574999988079071},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5733000040054321},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.5386999845504761},{"id":"https://openalex.org/C18899389","wikidata":"https://www.wikidata.org/wiki/Q2736593","display_name":"Blind signature","level":4,"score":0.5256999731063843},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5138000249862671},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.4309000074863434},{"id":"https://openalex.org/C168941894","wikidata":"https://www.wikidata.org/wiki/Q3483645","display_name":"Ring signature","level":4,"score":0.39649999141693115},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.37310001254081726},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.34630000591278076},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.33390000462532043},{"id":"https://openalex.org/C202424057","wikidata":"https://www.wikidata.org/wiki/Q1224829","display_name":"Digital Signature Algorithm","level":4,"score":0.3328000009059906},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.3321000039577484},{"id":"https://openalex.org/C40404285","wikidata":"https://www.wikidata.org/wiki/Q1921816","display_name":"Merkle signature scheme","level":5,"score":0.3025999963283539},{"id":"https://openalex.org/C163173736","wikidata":"https://www.wikidata.org/wiki/Q3308558","display_name":"Key generation","level":3,"score":0.2928999960422516},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.28790000081062317},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C124968333","wikidata":"https://www.wikidata.org/wiki/Q1465057","display_name":"Schnorr signature","level":5,"score":0.2678000032901764},{"id":"https://openalex.org/C197966572","wikidata":"https://www.wikidata.org/wiki/Q915079","display_name":"Elliptic Curve Digital Signature Algorithm","level":5,"score":0.2574999928474426},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2554999887943268},{"id":"https://openalex.org/C2776900844","wikidata":"https://www.wikidata.org/wiki/Q8028383","display_name":"Witness","level":2,"score":0.2554999887943268}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.62056/aebngyl7s","is_oa":true,"landing_page_url":"https://doi.org/10.62056/aebngyl7s","pdf_url":"https://cic.iacr.org/p/2/4/24/pdf","source":{"id":"https://openalex.org/S4394708374","display_name":"IACR Communications in Cryptology","issn_l":"3006-5496","issn":["3006-5496"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320989","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/P4310320989"],"host_organization_lineage_names":["International Association for Cryptologic Research"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Communications in Cryptology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.62056/aebngyl7s","is_oa":true,"landing_page_url":"https://doi.org/10.62056/aebngyl7s","pdf_url":"https://cic.iacr.org/p/2/4/24/pdf","source":{"id":"https://openalex.org/S4394708374","display_name":"IACR Communications in Cryptology","issn_l":"3006-5496","issn":["3006-5496"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320989","host_organization_name":"International Association for Cryptologic Research","host_organization_lineage":["https://openalex.org/P4310320989"],"host_organization_lineage_names":["International Association for Cryptologic Research"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Communications in Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322327","display_name":"Knut och Alice Wallenbergs Stiftelse","ror":"https://ror.org/004hzzk67"},{"id":"https://openalex.org/F4320322581","display_name":"Vetenskapsr\u00e5det","ror":"https://ror.org/03zttf063"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7119466137.pdf","grobid_xml":"https://content.openalex.org/works/W7119466137.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W1589034595","https://openalex.org/W1897761346","https://openalex.org/W1952573265","https://openalex.org/W2069535412","https://openalex.org/W2161740631","https://openalex.org/W3013381209","https://openalex.org/W3015791201","https://openalex.org/W3092436054","https://openalex.org/W3106970912","https://openalex.org/W3212418903","https://openalex.org/W3213574559","https://openalex.org/W3214651532","https://openalex.org/W4205491429","https://openalex.org/W4213239787","https://openalex.org/W4310480138","https://openalex.org/W4312245255","https://openalex.org/W4381430786","https://openalex.org/W4385648276","https://openalex.org/W4387319508","https://openalex.org/W4389843994","https://openalex.org/W4395114685","https://openalex.org/W4399396297","https://openalex.org/W4401442713","https://openalex.org/W4401456194","https://openalex.org/W4401459825","https://openalex.org/W4405200472","https://openalex.org/W4408788411"],"related_works":[],"abstract_inverted_index":{"The":[0],"ongoing":[1,25],"transition":[2],"to":[3,61,185],"post-quantum":[4,26],"cryptography":[5],"has":[6],"highlighted":[7],"the":[8,21,36,65,68,94,110,134,156,167,191],"need":[9],"for":[10],"digital":[11],"signature":[12,27,54,78,146,196],"schemes":[13,79],"offering":[14],"diverse":[15],"performance":[16],"and":[17,120,129,170,189],"security":[18,87,97],"trade-offs.":[19],"Among":[20],"candidates":[22],"in":[23,45],"NIST\u2019s":[24],"standardisation":[28],"process":[29],"is":[30],"FAEST,":[31],"a":[32,85,144],"scheme":[33],"built":[34],"upon":[35],"Vector":[37],"Oblivious":[38],"Linear":[39],"Evaluation":[40],"in-the-Head":[41],"(VOLEitH)":[42],"paradigm":[43],"introduced":[44],"2023.":[46],"VOLEitH":[47,157],"enables":[48,159],"efficient":[49],"zero-knowledge":[50],"proofs":[51],"with":[52,138],"competitive":[53],"sizes":[55],"under":[56],"conservative":[57],"assumptions,":[58],"allowing":[59],"FAEST":[60,114],"rely":[62],"primarily":[63],"on":[64,109,147],"one-wayness":[66],"of":[67,113,161,166,175,194],"Advanced":[69],"Encryption":[70],"Standard":[71],"(AES).":[72],"Despite":[73],"their":[74],"promising":[75],"efficiency,":[76],"VOLEitH-based":[77,195],"have":[80],"remained":[81],"relatively":[82],"unexplored":[83],"from":[84,126,143],"physical":[86,192],"perspective.":[88],"In":[89],"this":[90],"paper,":[91],"we":[92,100,181],"present":[93],"first":[95],"side-channel":[96],"evaluation.":[98],"Specifically,":[99],"demonstrate":[101],"two":[102],"single-trace,":[103],"deep":[104],"learning-assisted":[105],"power":[106],"analysis":[107],"attacks":[108,123],"masked":[111],"implementation":[112],"by":[115],"Aranha,":[116],"Degn,":[117],"Eilath,":[118],"Nielsen,":[119],"Scholl.":[121],"These":[122],"exploit":[124],"leakage":[125,174],"witness":[127],"bits":[128],"VOLE":[130,162],"tag":[131],"computations,":[132],"recovering":[133],"full":[135],"secret":[136,168],"key":[137,169],"success":[139],"probability":[140],"above":[141],"0.99":[142],"single":[145],"an":[148],"ARM":[149],"Cortex-M4":[150],"processor.":[151],"We":[152],"further":[153],"analyse":[154],"how":[155,171],"construction":[158],"profiling":[160],"tags":[163,177],"without":[164],"knowledge":[165],"even":[172],"partial":[173],"these":[176],"compromises":[178],"security.":[179],"Finally,":[180],"discuss":[182],"practical":[183],"countermeasures":[184],"mitigate":[186],"such":[187],"leakages":[188],"strengthen":[190],"resilience":[193],"implementations.":[197]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-01-09T00:00:00"}