Is lattice-based cryptography still prone to side channel attacks? What are some mitigation strategies, if any?
$\begingroup$
$\endgroup$
3
-
1$\begingroup$ You'd probably have to specify at least which type of scheme so that you can know what operations it uses, so that you can know whether or not implementations of those operations are prone to side channel attacks (which target the implementation and not the algorithm). $\endgroup$– Ella RoseFeb 5, 2018 at 20:37
-
$\begingroup$ You'd also probably need to specify which side channels as well (timing, cache, DPA, EMI, Fault) $\endgroup$– ponchoFeb 5, 2018 at 22:43
-
2$\begingroup$ Is there any cryptography not prone to side channel attacks? $\endgroup$– mikeazoFeb 6, 2018 at 2:27
Add a comment
|
1 Answer
$\begingroup$
$\endgroup$
1
my understanding is that Supersingular isogeny Diffie-Hellman (SIDH) is fully protected against timing and cache attacks as all operations on secret data run in constant time. That was my own experience.
-
4$\begingroup$ Please note that SIDH usually does not fall under "lattice-based" schemes. So technically you have answered a different question. $\endgroup$– SEJPMFeb 6, 2018 at 11:27