### Masking the GLP Lattice-Based Signature Scheme at Any Order

Gilles Barthe, Sonia Belaïd, Thomas Espitau, Pierre-Alain Fouque, Benjamin Grégoire, Mélissa Rossi, and Mehdi Tibouchi

##### Abstract

Recently, numerous physical attacks have been demonstrated against lattice-based schemes, often exploiting their unique properties such as the reliance on Gaussian distributions, rejection sampling and FFT-based polynomial multiplication. As the call for concrete implementations and deployment of postquantum cryptography becomes more pressing, protecting against those attacks is an important problem. However, few countermeasures have been proposed so far. In particular, masking has been applied to the decryption procedure of some lattice-based encryption schemes, but the much more difficult case of signatures (which are highly non-linear and typically involve randomness) has not been considered until now. In this paper, we describe the first masked implementation of a lattice-based signature scheme. Since masking Gaussian sampling and other procedures involving contrived probability distribution would be prohibitively inefficient, we focus on the GLP scheme of Güneysu, Lyubashevsky and Pöppelmann (CHES 2012). We show how to provably mask it in the Ishai--Sahai--Wagner model (CRYPTO 2003) at any order in a relatively efficient manner, using extensions of the techniques of Coron et al for converting between arithmetic and Boolean masking. Our proof relies on a mild generalization of probing security that supports the notion of public outputs. We also provide a proof-of-concept implementation to assess the efficiency of the proposed countermeasure.

Available format(s)
Publication info
A minor revision of an IACR publication in EUROCRYPT 2018
Keywords
Contact author(s)
melissa rossi @ ens fr
History
2020-08-19: last of 2 revisions
See all versions
Short URL
https://ia.cr/2018/381

CC BY

BibTeX

@misc{cryptoeprint:2018/381,
author = {Gilles Barthe and Sonia Belaïd and Thomas Espitau and Pierre-Alain Fouque and Benjamin Grégoire and Mélissa Rossi and Mehdi Tibouchi},
title = {Masking the GLP Lattice-Based Signature Scheme at Any Order},
howpublished = {Cryptology ePrint Archive, Paper 2018/381},
year = {2018},
note = {\url{https://eprint.iacr.org/2018/381}},
url = {https://eprint.iacr.org/2018/381}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.