On Exploiting Message Leakage in (few) NIST PQC Candidates for Practical Message Recovery Attacks

Prasanna Ravi, Shivam Bhasin, Sujoy Sinha Roy, Anupam Chattopadhyay

Publikation: Beitrag in einer FachzeitschriftArtikelBegutachtung


In this work, we propose generic and practical side-channel attacks for message recovery in post-quantum lattice-based public key encryption (PKE) and key encapsulation mechanisms (KEM). The targeted schemes are based on the well known Learning With Errors (LWE) and Learning With Rounding (LWR) problem and include three finalists and six semi-finalist candidates of the ongoing NIST’s standardization process for post-quantum cryptography. Notably, we propose to exploit inherent ciphertext malleability properties of LWE/LWR-based PKEs as a powerful tool for side-channel assisted message recovery attacks. The use of ciphertext malleability widens the scope of previous attacks with the ability to target multiple operations for message recovery. Moreover, our attacks are adaptable to different implementation variants and are also applicable to implementations protected with concrete shuffling and masking side-channel countermeasures. Our work mainly highlights the presence of inherent algorithmic properties in LWE/LWR-based schemes that can aid side-channel attacks for message recovery, thereby stressing on the need for strong side-channel countermeasures against message recovery for LWE/LWR-based schemes.

Seiten (von - bis)684-699
FachzeitschriftIEEE Transactions on Information Forensics and Security
PublikationsstatusVeröffentlicht - 28 Dez. 2021

ASJC Scopus subject areas

  • Sicherheit, Risiko, Zuverlässigkeit und Qualität
  • Computernetzwerke und -kommunikation

Fields of Expertise

  • Information, Communication & Computing


Untersuchen Sie die Forschungsthemen von „On Exploiting Message Leakage in (few) NIST PQC Candidates for Practical Message Recovery Attacks“. Zusammen bilden sie einen einzigartigen Fingerprint.

Dieses zitieren