High-order masking of NTRU
Keywords:High-order masking, lattice-based cryptography, NTRU
The main protection against side-channel attacks consists in computing every function with multiple shares via the masking countermeasure. While the masking countermeasure was originally developed for securing block-ciphers such as AES, the protection of lattice-based cryptosystems is often more challenging, because of the diversity of the underlying algorithms. In this paper, we introduce new gadgets for the high-order masking of the NTRU cryptosystem, with security proofs in the classical ISW probing model. We then describe the first fully masked implementation of the NTRU Key Encapsulation Mechanism submitted to NIST, including the key generation. To assess the practicality of our countermeasures, we provide a concrete implementation on ARM Cortex-M3 architecture, and eventually a t-test leakage evaluation.
How to Cite
Copyright (c) 2023 Jean-Sébastien Coron, François Gérard, Matthias Trannoy, Rina Zeitoun
This work is licensed under a Creative Commons Attribution 4.0 International License.