Analyzing the Shuffling Side-Channel Countermeasure for Lattice-Based Signatures.
Peter Pessl · IACR Cryptology ePrint Archive · 2017
Implementation security for lattice-based cryptography is still a vastly unexplored field. At CHES 2016, the very first side-channel attack on a lattice-based signature scheme was presented. Later, shuffling was proposed as an inexpensive means to protect the Gaussian sampling component against such attacks. However, the concrete effectiveness of this countermeasure has never been evaluated.