Is lattice-based cryptography still prone to side channel attacks? What are some mitigation strategies, if any?
4
$\begingroup$
$\endgroup$
-
1$\begingroup$ You'd probably have to specify at least which type of scheme so that you can know what operations it uses, so that you can know whether or not implementations of those operations are prone to side channel attacks (which target the implementation and not the algorithm). $\endgroup$ – Ella Rose♦ Feb 5 '18 at 20:37
-
$\begingroup$ You'd also probably need to specify which side channels as well (timing, cache, DPA, EMI, Fault) $\endgroup$ – poncho Feb 5 '18 at 22:43
-
2$\begingroup$ Is there any cryptography not prone to side channel attacks? $\endgroup$ – mikeazo Feb 6 '18 at 2:27
-1
$\begingroup$
$\endgroup$
my understanding is that Supersingular isogeny Diffie-Hellman (SIDH) is fully protected against timing and cache attacks as all operations on secret data run in constant time. That was my own experience.
-
3$\begingroup$ Please note that SIDH usually does not fall under "lattice-based" schemes. So technically you have answered a different question. $\endgroup$ – SEJPM♦ Feb 6 '18 at 11:27
