[Resource Topic] 2022/110: Revisiting Higher-Order Masked Comparison for Lattice-Based Cryptography: Algorithms and Bit-sliced Implementations

Welcome to the resource topic for 2022/110

Title:
Revisiting Higher-Order Masked Comparison for Lattice-Based Cryptography: Algorithms and Bit-sliced Implementations

Authors: Jan-Pieter D'Anvers, Michiel Van Beirendonck, Ingrid Verbauwhede

Abstract:

Masked comparison is one of the most expensive operations in side-channel secure implementations of lattice-based post-quantum cryptography, especially for higher masking orders. First, we introduce two new masked comparison algorithms, which improve the arithmetic comparison of D’Anvers et al. and the hybrid comparison method of Coron et al. respectively. We then look into implementation-specific optimizations, and show that small specific adaptations can have a significant impact on the overall performance. Finally, we implement various state-of-the-art comparison algorithms and benchmark them on the same platform (ARM-Cortex M4) to allow a fair comparison between them. We improve on the arithmetic comparison of D’Anvers et al. with a factor \approx 20\% by using Galois Field multiplications and the hybrid comparison of Coron et al. with a factor \approx 25\% by streamlining the design. Our implementation-specific improvements allow a speedup of a straightforward comparison implementation of \approx 33\%. We discuss the differences between the various algorithms and provide the implementations and a testing framework to ease future research.

ePrint: https://eprint.iacr.org/2022/110

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .