Paper 2021/477
Side-Channel Attack on ROLLO Post-Quantum Cryptographic Scheme
Agathe Cheriere and Lina Mortajine and Tania Richmond and Nadia El Mrabet
Abstract
ROLLO is a candidate to the second round of NIST Post-Quantum Cryptography standardization process. In the last update in April 2020, there was a key encapsulation mechanism (ROLLO-I) and a public-key encryption scheme (ROLLO-II). In this paper, we propose an attack to recover the syndrome during the decapsulation process of ROLLO-I. From this syndrome, we explain how to perform a private key-recovery. We target two constant-time implementations: the C reference implementation and a C implementation available on GitHub. By getting power measurements during the execution of the Gaussian elimination function, we are able to extract on a single trace each element of the syndrome. This attack can also be applied to the decryption process of ROLLO-II.
Metadata
- Available format(s)
- Category
- Public-key cryptography
- Publication info
- Preprint. MINOR revision.
- Keywords
- ROLLOside-channel attackpower consumption analysiskey-recovery attacksingle-trace analysisrank metricLRPC codes
- Contact author(s)
- agathe cheriere @ irisa fr,lina mortajine @ emse fr,tania richmond @ inria fr
- History
- 2022-10-24: last of 2 revisions
- 2021-04-15: received
- See all versions
- Short URL
- https://ia.cr/2021/477
- License
-
CC BY