I'm interested in lattice type cryptosystem such as Mod-LWR.
But I found that integer multiplication¹ is not safe for side-channel attacks.
I tried to make masking method by own method but it failed in t-test².
Are there any masking methods for integer multiplication?
¹ This is modular multiplication, but modulo is power of 2. So in 8bit multiplication, output is 8bit. I assume the multiplication itself has bitwidth of 13bit, just like a PQC candidate, SABER.
² The test is Welch's t-test. I tested my hardware (hspice converted from verilog) circuit with measuring power traces within constant period. With random input random output vs. fixed input fixed output. Power differs with input random number that used in B2A, A2B masking.