3 ms·
Falcon Down: Breaking Falcon Signature Scheme Through Side-Channel Attacks [pdf] (2021)
- xhkkffbf 3y agoThis is interesting news. I wonder if the EMF leaking from other chips can divulge keys?
- kyboren 3y agoYes, it can and will, unless very special care is taken to ensure it does not. See also TEMPEST[0] and NSTISSAM[1]. [0]: https://en.wikipedia.org/wiki/Tempest_%28codename%29 https://en.wikipedia.org/wiki/Tempest_%28codename%29 [1]: https://web.elastic.org/~fche/mirrors/cryptome.org/nt1-92-1-5.htm https://web.elastic.org/~fche/mirrors/cryptome.org/nt1-92-1-...
- tptacek 3y agoIt's not news, is it? It's from 2021.
- api 3y agoThis isn’t the same as a true mathematical break, but what it does show is that Falcon is very hard to implement without presenting side channels attacks. That makes it unfavorable to a lot of cryptographers.
- jnwatson 3y agoIt took a long time before we came up with a bunch of mechanisms to hide the power profile of ECC scalar multiplies. I expect the same here.
- deleted 3y ago[deleted]