Haiying Gao

FrodoKEM is a lattice-based Public-Key Encryption (PKE)/Key Encapsulation Mechanism (KEM) scheme selected as a third-round candidate in the National Institute of Standards and Technology (NIST) post-quantum cryptography standardization process. It has also been recommended by the German Federal Office for Information Security and the Dutch National Communications Security Agency as a long-term confidential encryption algorithm and has been included in the ISO/IEC JTC 1/SC 27/WG 2 draft international standard for post-quantum cryptography. To address the threats of Side-Channel Attacks (SCA, including timing attacks, power analysis attacks, and fault attacks) against FrodoKEM, this paper proposes a security-enhanced implementation scheme. Specifically, during the sampling phase and ciphertext comparison, isochronous operations are adopted to eliminate timing sensitivity and mitigate timing attack risks. In public key computation, masking techniques are introduced to obscure critical data and operations, thereby resisting power analysis attacks. Additionally, a sampling calibration mechanism is implemented to detect and circumvent fault attacks. Under the same parameter sets, a performance comparison between the SCA-resistant scheme and the original FrodoKEM demonstrates that the computational overhead increase is less than 0.8%. The scheme’s strengthened resilience against SCA is further validated through Test Vector Leakage Assessment (TVLA), achieving a balance between enhanced security and minimal performance degradation.

Updatable encryption (UE) is suitable for key rotation and ciphertexts update in the cloud storage environment. A new security model for UE named Token Open security model is presented recently, which is closer to the real attack scenario. And the existing post-quantum secure UE schemes are all based on the LWE assumption without engineering implementation. In this paper, we improve the recently presented security model, which allows the adversary to corrupt all update tokens and keys of the past epochs. We show that our new model reflects the characteristics of UE. Then we construct the first UE scheme based on NTRU, named NTRU-UE. Our new scheme uses the key-switching technique to achieve backward-leak uni-directional key update and uni-directional ciphertext update and uses the ciphertext-masking technique to achieve rand-update. We show that the new scheme is secure under our new model. In addition, we accomplish the software implementation of NTRU-UE and the experiment results show that the scheme meets the practical requirements.

Multiplication on polynomial rings has been widely used in public-key cryptographic schemes based on ideal lattices. It is an important module that significantly affects the efficiency of the schemes. Improved Preprocess-then-NTT (IPtNTT) is an algorithm which can fast realize multiplication on polynomial rings. Compared with the Number Theoretic Transform (NTT), the IPtNTT weakens the parameter restriction of lattice-based public-key cryptographic schemes. By optimizing the IPtNTT with the AVX2 instruction set, we reduce the clock cycles consumed by multiplication on polynomial rings to 15%–22%. According to the experimental results, we give specific suggestions on using AVX2 optimized IPtNTT to realize multiplication on polynomial rings with different parameters chosen in lattice-based public-key cryptosystems.

International publishers of academic, scientific and professional journals since 1979.