Is lattice-based cryptography still prone to side channel attacks? What are some mitigation strategies, if any?

  • 1
    $\begingroup$ You'd probably have to specify at least which type of scheme so that you can know what operations it uses, so that you can know whether or not implementations of those operations are prone to side channel attacks (which target the implementation and not the algorithm). $\endgroup$
    – Ella Rose
    Feb 5 '18 at 20:37
  • $\begingroup$ You'd also probably need to specify which side channels as well (timing, cache, DPA, EMI, Fault) $\endgroup$
    – poncho
    Feb 5 '18 at 22:43
  • 2
    $\begingroup$ Is there any cryptography not prone to side channel attacks? $\endgroup$
    – mikeazo
    Feb 6 '18 at 2:27

my understanding is that Supersingular isogeny Diffie-Hellman (SIDH) is fully protected against timing and cache attacks as all operations on secret data run in constant time. That was my own experience.

  • 3
    $\begingroup$ Please note that SIDH usually does not fall under "lattice-based" schemes. So technically you have answered a different question. $\endgroup$
    – SEJPM
    Feb 6 '18 at 11:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.