4
$\begingroup$

Is lattice-based cryptography still prone to side channel attacks? What are some mitigation strategies, if any?

Improve this question
$\endgroup$
3
  • 1
    $\begingroup$ You'd probably have to specify at least which type of scheme so that you can know what operations it uses, so that you can know whether or not implementations of those operations are prone to side channel attacks (which target the implementation and not the algorithm). $\endgroup$ – Ella Rose Feb 5 '18 at 20:37
  • $\begingroup$ You'd also probably need to specify which side channels as well (timing, cache, DPA, EMI, Fault) $\endgroup$ – poncho Feb 5 '18 at 22:43
  • 2
    $\begingroup$ Is there any cryptography not prone to side channel attacks? $\endgroup$ – mikeazo Feb 6 '18 at 2:27
-1
$\begingroup$

my understanding is that Supersingular isogeny Diffie-Hellman (SIDH) is fully protected against timing and cache attacks as all operations on secret data run in constant time. That was my own experience.

Improve this answer
$\endgroup$
1
  • 3
    $\begingroup$ Please note that SIDH usually does not fall under "lattice-based" schemes. So technically you have answered a different question. $\endgroup$ – SEJPM♦ Feb 6 '18 at 11:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.