面向后量子密码的掩码友好设计
On the Masking-Friendly Designs for Post-Quantum Cryptography
AI总结：
本文研究设计选择对格基密码掩码集成效率的影响，提出Scabbard套件（Florete、Espada、Sable）的任意阶掩码实现，相比Kyber在速度上显著提升，证明掩码友好设计的重要性。
摘要：
掩码是一种众所周知且可证明安全的对抗侧信道攻击的对策。然而，由于额外的冗余计算，集成掩码方案在性能方面代价高昂。集成掩码对策的性能开销在很大程度上受密码算法设计选择的影响，且在设计阶段通常未被考虑。在本工作中，我们探讨了设计选择对将掩码技术集成到基于格的密码学中的影响。我们选择了Scabbard，一个包含三种基于格的抗量子密钥封装机制（KEM）的套件，即Florete、Espada和Sable。我们利用它们特定的设计元素，提供了Scabbard套件中所有组成KEM的任意阶掩码实现。我们表明，对于任何阶数的掩码，Florete、Espada和Sable的掩码实现在速度上均优于Kyber的掩码实现。掩码Florete相对于掩码Kyber，在一阶、二阶和三阶掩码下分别展现出73%、71%和70%的性能提升。类似地，Espada在一阶、二阶和三阶掩码下分别展现出56%、59%和60%的性能提升，而Sable相对于Kyber在一阶、二阶和三阶掩码下分别展现出75%、74%和73%的增强性能。我们的结果表明，设计决策对将掩码对策集成到基于格的密码学中的效率有显著影响。
英文摘要：
Masking is a well-known and provably secure countermeasure against side-channel attacks. However, due to additional redundant computations, integrating masking schemes is expensive in terms of performance. The performance overhead of integrating masking countermeasures is heavily influenced by the design choices of a cryptographic algorithm and is often not considered during the design phase. In this work, we deliberate on the effect of design choices on integrating masking techniques into lattice-based cryptography. We select Scabbard, a suite of three lattice-based post-quantum key-encapsulation mechanisms (KEM), namely Florete, Espada, and Sable. We provide arbitrary-order masked implementations of all the constituent KEMs of the Scabbard suite by exploiting their specific design elements. We show that the masked implementations of Florete, Espada, and Sable outperform the masked implementations of Kyber in terms of speed for any order masking. Masked Florete exhibits a $73\%$, $71\%$, and $70\%$ performance improvement over masked Kyber corresponding to the first-, second-, and third-order. Similarly, Espada exhibits $56\%$, $59\%$, and $60\%$ and Sable exhibits $75\%$, $74\%$, and $73\%$ enhanced performance for first-, second-, and third-order masking compared to Kyber respectively. Our results show that the design decisions have a significant impact on the efficiency of integrating masking countermeasures into lattice-based cryptography.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
