{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T11:57:22Z","timestamp":1792756642877,"version":"4.5.0"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031911002","type":"print"},{"value":"9783031911019","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-91101-9_1","type":"book-chapter","created":{"date-parts":[[2025,4,27]],"date-time":"2025-04-27T21:14:14Z","timestamp":1745788454000},"page":"3-32","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["A Generic Framework for\u00a0Side-Channel Attacks Against LWE-Based Cryptosystems"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1649-4231","authenticated-orcid":false,"given":"Julius","family":"Hermelink","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5822-2402","authenticated-orcid":false,"given":"Silvan","family":"Streit","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5824-7282","authenticated-orcid":false,"given":"Erik","family":"M\u00e5rtensson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0972-1544","authenticated-orcid":false,"given":"Richard","family":"Petri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,4,28]]},"reference":[{"key":"1_CR1","doi-asserted-by":"crossref","unstructured":"Albrecht, M.R., Player, R., Scott, S.: On the concrete hardness of learning with errors. J. Math. Cryptol. 9(3), 169\u2013203 (2015). http:\/\/www.degruyter.com\/view\/j\/jmc.2015.9.issue-3\/jmc-2015-0016\/jmc-2015-0016.xml","DOI":"10.1515\/jmc-2015-0016"},{"key":"1_CR2","unstructured":"Avanzi, R., et al.: CRYSTALS-KYBER. Tech. rep., National Institute of Standards and Technology (2020). https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-3-submissions"},{"key":"1_CR3","doi-asserted-by":"publisher","unstructured":"Bhasin, S., D\u2019Anvers, J.P., Heinz, D., P\u00f6ppelmann, T., Van Beirendonck, M.: Attacking and defending masked polynomial comparison. IACR TCHES 2021(3), 334\u2013359 (2021). https:\/\/doi.org\/10.46586\/tches.v2021.i3.334-359, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/8977","DOI":"10.46586\/tches.v2021.i3.334-359"},{"key":"1_CR4","doi-asserted-by":"publisher","unstructured":"Bronchain, O., Azouaoui, M., ElGhamrawy, M., Renes, J., Schneider, T.: Exploiting small-norm polynomial multiplication with physical attacks application to CRYSTALS-Dilithium. IACR TCHES 2024(2), 359\u2013383 (2024). https:\/\/doi.org\/10.46586\/tches.v2024.i2.359-383","DOI":"10.46586\/tches.v2024.i2.359-383"},{"key":"1_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"329","DOI":"10.1007\/978-3-030-56880-1_12","volume-title":"Advances in Cryptology \u2013 CRYPTO 2020","author":"D Dachman-Soled","year":"2020","unstructured":"Dachman-Soled, D., Ducas, L., Gong, H., Rossi, M.: LWE with side information: attacks and concrete security estimation. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO 2020. LNCS, vol. 12171, pp. 329\u2013358. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-56880-1_12"},{"key":"1_CR6","doi-asserted-by":"publisher","first-page":"748","DOI":"10.1007\/978-3-031-38554-4_24","volume-title":"Advances in Cryptology \u2013 CRYPTO 2023: 43rd Annual International Cryptology Conference, CRYPTO 2023, Santa Barbara, CA, USA, August 20\u201324, 2023, Proceedings, Part V","author":"D Dachman-Soled","year":"2023","unstructured":"Dachman-Soled, D., Gong, H., Hanson, T., Kippen, H.: Revisiting security estimation for\u00a0LWE with\u00a0hints from\u00a0a\u00a0geometric perspective. In: Handschuh, H., Lysyanskaya, A. (eds.) Advances in Cryptology \u2013 CRYPTO 2023: 43rd Annual International Cryptology Conference, CRYPTO 2023, Santa Barbara, CA, USA, August 20\u201324, 2023, Proceedings, Part V, pp. 748\u2013781. Springer Nature Switzerland, Cham (2023). https:\/\/doi.org\/10.1007\/978-3-031-38554-4_24"},{"key":"1_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"565","DOI":"10.1007\/978-3-030-17259-6_19","volume-title":"Public-Key Cryptography \u2013 PKC 2019","author":"J-P D\u2019Anvers","year":"2019","unstructured":"D\u2019Anvers, J.-P., Guo, Q., Johansson, T., Nilsson, A., Vercauteren, F., Verbauwhede, I.: Decryption failure attacks on IND-CCA secure lattice-based schemes. In: Lin, D., Sako, K. (eds.) PKC 2019. LNCS, vol. 11443, pp. 565\u2013598. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-17259-6_19"},{"key":"1_CR8","doi-asserted-by":"publisher","unstructured":"D\u2019Anvers, J.-P., Heinz, D., Pessl, P., Van Beirendonck, M., Verbauwhede, I.: Higher-Order Masked Ciphertext Comparison for Lattice-Based Cryptography. IACR Trans. Cryptograph. Hardw. Embedded Systs. 115\u2013139 (2022). https:\/\/doi.org\/10.46586\/tches.v2022.i2.115-139","DOI":"10.46586\/tches.v2022.i2.115-139"},{"key":"1_CR9","doi-asserted-by":"publisher","unstructured":"Delvaux, J.: Roulette: A diverse family of feasible fault attacks on masked Kyber. IACR TCHES 2022(4), 637\u2013660 (2022). https:\/\/doi.org\/10.46586\/tches.v2022.i4.637-660","DOI":"10.46586\/tches.v2022.i4.637-660"},{"key":"1_CR10","unstructured":"Ducas, L., et al.: CRYSTALS-DILITHIUM. Tech. rep., National Institute of Standards and Technology (2020). https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/round-3-submissions"},{"key":"1_CR11","doi-asserted-by":"publisher","unstructured":"Fahr, M., et al.: When frodo flips: End-to-end key recovery on FrodoKEM via rowhammer. In: Yin, H., Stavrou, A., Cremers, C., Shi, E. (eds.) ACM CCS 2022, pp. 979\u2013993. ACM Press, Los Angeles, CA, USA (Nov\u00a07\u201311, 2022). https:\/\/doi.org\/10.1145\/3548606.3560673","DOI":"10.1145\/3548606.3560673"},{"key":"1_CR12","doi-asserted-by":"publisher","unstructured":"Gallager, R.G.: Low-density parity-check codes. IRE Trans. Inf. Theory 8(1), 21\u201328 (1962). https:\/\/doi.org\/10.1109\/TIT.1962.1057683","DOI":"10.1109\/TIT.1962.1057683"},{"key":"1_CR13","doi-asserted-by":"publisher","unstructured":"Hamburg, M., et al.: Chosen ciphertext k-trace attacks on masked CCA2 secure Kyber. IACR TCHES 2021(4), 88\u2013113 (2021). https:\/\/doi.org\/10.46586\/tches.v2021.i4.88-113, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/9061","DOI":"10.46586\/tches.v2021.i4.88-113"},{"key":"1_CR14","doi-asserted-by":"publisher","unstructured":"Hermelink, J., M\u00e5rtensson, E., Samardjiska, S., Pessl, P., Rodosek, G.D.: Belief propagation meets lattice reduction: security estimates for error-tolerant key recovery from decryption errors. IACR TCHES 2023(4), 287\u2013317 (2023). https:\/\/doi.org\/10.46586\/tches.v2023.i4.287-317","DOI":"10.46586\/tches.v2023.i4.287-317"},{"key":"1_CR15","doi-asserted-by":"publisher","unstructured":"Hermelink, J., Ning, K.C., Petri, R., Strieder, E.: The insecurity of masked comparisons: SCAs on ML-KEM\u2019s FO-transform. In: Luo, B., Liao, X., Xu, J., Kirda, E., Lie, D. (eds.) ACM CCS 2024, pp. 2430\u20132444. ACM Press, Salt Lake City, UT, USA (Oct\u00a014\u201318, 2024). https:\/\/doi.org\/10.1145\/3658644.3690339","DOI":"10.1145\/3658644.3690339"},{"key":"1_CR16","doi-asserted-by":"crossref","unstructured":"Hermelink, J., Ning, K., Strieder, E.: The insecurity of masked comparisons: Scas on ml-kem\u2019s fo-transform. IACR Cryptol. ePrint Arch, p.\u00a060 (2024). https:\/\/eprint.iacr.org\/2024\/060","DOI":"10.1145\/3658644.3690339"},{"key":"1_CR17","doi-asserted-by":"publisher","first-page":"311","DOI":"10.1007\/978-3-030-92518-5_15","volume-title":"Progress in Cryptology \u2013 INDOCRYPT 2021: 22nd International Conference on Cryptology in India, Jaipur, India, December 12\u201315, 2021, Proceedings","author":"J Hermelink","year":"2021","unstructured":"Hermelink, J., Pessl, P., P\u00f6ppelmann, T.: Fault-enabled chosen-ciphertext attacks on\u00a0Kyber. In: Adhikari, A., K\u00fcsters, R., Preneel, B. (eds.) Progress in Cryptology \u2013 INDOCRYPT 2021: 22nd International Conference on Cryptology in India, Jaipur, India, December 12\u201315, 2021, Proceedings, pp. 311\u2013334. Springer International Publishing, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-92518-5_15"},{"key":"1_CR18","doi-asserted-by":"publisher","unstructured":"Kannwischer, M.J., Pessl, P., Primas, R.: Single-trace attacks on Keccak. IACR TCHES 2020(3), 243\u2013268 (2020). https:\/\/doi.org\/10.13154\/tches.v2020.i3.243-268, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/8590","DOI":"10.13154\/tches.v2020.i3.243-268"},{"key":"1_CR19","doi-asserted-by":"publisher","unstructured":"Kannwischer, M.J., Schwabe, P., Stebila, D., Wiggers, T.: Improving software quality in cryptography standardization projects. In: IEEE European Symposium on Security and Privacy, EuroS &P 2022 - Workshops, Genoa, Italy, June 6-10, 2022, pp. 19\u201330. IEEE Computer Society, Los Alamitos, CA, USA (2022). https:\/\/doi.org\/10.1109\/EuroSPW55150.2022.00010, https:\/\/eprint.iacr.org\/2022\/337","DOI":"10.1109\/EuroSPW55150.2022.00010"},{"key":"1_CR20","doi-asserted-by":"publisher","unstructured":"May, A., Nowakowski, J.: Too many hints - when LLL breaks LWE. In: Guo, J., Steinfeld, R. (eds.) ASIACRYPT\u00a02023, Part\u00a0IV. LNCS, vol. 14441, pp. 106\u2013137. Springer, Singapore, Singapore, Guangzhou, China (Dec\u00a04\u20138, 2023). https:\/\/doi.org\/10.1007\/978-981-99-8730-6_4","DOI":"10.1007\/978-981-99-8730-6_4"},{"key":"1_CR21","doi-asserted-by":"crossref","unstructured":"National Institute of Standards and Technology: Module-lattice-based digital signature standard. Tech. rep., Department of Commerce, Washington, D.C. (2023), federal Information Processing Standards Publication (FIPS) NIST FIPS 204 ipd. https:\/\/doi.org\/10.6028\/NIST.FIPS.204.ipd","DOI":"10.6028\/NIST.FIPS.204.ipd"},{"key":"1_CR22","doi-asserted-by":"crossref","unstructured":"National Institute of Standards and Technology: Module-lattice-based key-encapsulation mechanism standard. Tech. rep., Department of Commerce, Washington, D.C. (2023), federal Information Processing Standards Publication (FIPS) NIST FIPS 203 ipd. https:\/\/doi.org\/10.6028\/NIST.FIPS.203.ipd","DOI":"10.6028\/NIST.FIPS.203.ipd"},{"key":"1_CR23","unstructured":"Paiva, T., Hermelink, J.: Personal conversation (2024)"},{"key":"1_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"130","DOI":"10.1007\/978-3-030-30530-7_7","volume-title":"Progress in Cryptology \u2013 LATINCRYPT 2019","author":"P Pessl","year":"2019","unstructured":"Pessl, P., Primas, R.: More practical single-trace attacks on the number theoretic transform. In: Schwabe, P., Th\u00e9riault, N. (eds.) LATINCRYPT 2019. LNCS, vol. 11774, pp. 130\u2013149. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-30530-7_7"},{"key":"1_CR25","doi-asserted-by":"publisher","unstructured":"Pessl, P., Prokop, L.: Fault attacks on CCA-secure lattice KEMs. IACR TCHES 2021(2), 37\u201360 (2021). https:\/\/doi.org\/10.46586\/tches.v2021.i2.37-60, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/8787","DOI":"10.46586\/tches.v2021.i2.37-60"},{"key":"1_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"513","DOI":"10.1007\/978-3-319-66787-4_25","volume-title":"Cryptographic Hardware and Embedded Systems \u2013 CHES 2017","author":"R Primas","year":"2017","unstructured":"Primas, R., Pessl, P., Mangard, S.: Single-trace side-channel attacks on masked lattice-based encryption. In: Fischer, W., Homma, N. (eds.) CHES 2017. LNCS, vol. 10529, pp. 513\u2013533. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-66787-4_25"},{"key":"1_CR27","unstructured":"Qiao, Z., Liu, Y., Zhou, Y., Shao, M., Sun, S.: When NTT meets SIS: Efficient side-channel attacks on dilithium and kyber. Cryptology ePrint Archive, Paper 2023\/1866 (2023). https:\/\/eprint.iacr.org\/2023\/1866"},{"key":"1_CR28","doi-asserted-by":"publisher","unstructured":"Rajendran, G., Ravi, P., D\u2019Anvers, J.P., Bhasin, S., Chattopadhyay, A.: Pushing the limits of generic side-channel attacks on LWE-based KEMs - parallel PC oracle attacks on Kyber KEM and beyond. IACR TCHES 2023(2), 418\u2013446 (2023). https:\/\/doi.org\/10.46586\/tches.v2023.i2.418-446","DOI":"10.46586\/tches.v2023.i2.418-446"},{"key":"1_CR29","doi-asserted-by":"publisher","unstructured":"Ravi, P., Paiva, T., Jap, D., D\u2019Anvers, J., Bhasin, S.: Defeating low-cost countermeasures against side-channel attacks in lattice-based encryption A case study on crystals-kyber. IACR TCHES 2024(2), 795\u2013818 (2024). https:\/\/doi.org\/10.46586\/TCHES.V2024.I2.795-818","DOI":"10.46586\/TCHES.V2024.I2.795-818"},{"key":"1_CR30","doi-asserted-by":"publisher","unstructured":"Ravi, P., Roy, S.S., Chattopadhyay, A., Bhasin, S.: Generic side-channel attacks on CCA-secure lattice-based PKE and KEMs. IACR TCHES 2020(3), 307\u2013335 (2020). https:\/\/doi.org\/10.13154\/tches.v2020.i3.307-335, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/8592","DOI":"10.13154\/tches.v2020.i3.307-335"},{"key":"1_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"282","DOI":"10.1007\/978-3-662-45611-8_15","volume-title":"Advances in Cryptology \u2013 ASIACRYPT 2014","author":"N Veyrat-Charvillon","year":"2014","unstructured":"Veyrat-Charvillon, N., G\u00e9rard, B., Standaert, F.-X.: Soft analytical side-channel attacks. In: Sarkar, P., Iwata, T. (eds.) ASIACRYPT 2014. LNCS, vol. 8873, pp. 282\u2013296. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-45611-8_15"},{"key":"1_CR32","doi-asserted-by":"publisher","unstructured":"Xu, Z., Pemberton, O., Roy, S.S., Oswald, D.F., Yao, W., Zheng, Z.: Magnifying side-channel leakage of lattice-based cryptosystems with chosen ciphertexts: the case study of kyber. IEEE Trans. Comput. 71(9), 2163\u20132176 (2022). https:\/\/doi.org\/10.1109\/TC.2021.3122997, https:\/\/doi.org\/10.1109\/TC.2021.3122997","DOI":"10.1109\/TC.2021.3122997"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 EUROCRYPT 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-91101-9_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,27]],"date-time":"2025-04-27T21:14:17Z","timestamp":1745788457000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-91101-9_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031911002","9783031911019"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-91101-9_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"28 April 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"EUROCRYPT","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Conference on the Theory and Applications of Cryptographic Techniques","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Madrid","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 May 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 May 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"44","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eurocrypt2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/eurocrypt.iacr.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}