{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,9]],"date-time":"2026-08-09T03:41:38Z","timestamp":1786246898062,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":33,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032353764","type":"print"},{"value":"9783032353771","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-35377-1_6","type":"book-chapter","created":{"date-parts":[[2026,8,9]],"date-time":"2026-08-09T02:46:15Z","timestamp":1786243575000},"page":"166-197","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Toward a\u00a0Secure Fixed-Point Implementation of\u00a0the\u00a0Falcon Signature Scheme"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5083-5434","authenticated-orcid":false,"given":"Daniel","family":"De Almeida Braga","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4997-2276","authenticated-orcid":false,"given":"Pierre-Alain","family":"Fouque","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-8174-9982","authenticated-orcid":false,"given":"Bachir","family":"Lachguel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1445-6212","authenticated-orcid":false,"given":"Thomas","family":"Prest","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,8,9]]},"reference":[{"key":"6_CR1","doi-asserted-by":"publisher","unstructured":"Bai, S., Lepoint, T., Roux-Langlois, A., Sakzad, A., Stehl\u00e9, D., Steinfeld, R.: Improved security proofs in lattice-based cryptography: using the R\u00e9nyi divergence rather than the statistical distance. J. Cryptol. 31(2), 610\u2013640 (2018). https:\/\/doi.org\/10.1007\/s00145-017-9265-9","DOI":"10.1007\/s00145-017-9265-9"},{"key":"6_CR2","doi-asserted-by":"publisher","unstructured":"Chen, K.Y., Chen, J.P.: Masking floating-point number multiplication and addition of falcon first- and higher-order implementations and evaluations. IACR TCHES 2024(2), 276\u2013303 (2024). https:\/\/doi.org\/10.46586\/tches.v2024.i2.276-303","DOI":"10.46586\/tches.v2024.i2.276-303"},{"key":"6_CR3","unstructured":"Csiszar, I.: Eine informationstheoretische ungleichung und ihre anwendung auf den beweis der ergodizitat von markoffschen ketten. Magyar Tud. Akad. Mat. Kutato Int. Kozl. 8, 85\u2013108 (1963)"},{"key":"6_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"608","DOI":"10.1007\/978-3-030-45724-2_21","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2020","author":"L Ducas","year":"2020","unstructured":"Ducas, L., Galbraith, S., Prest, T., Yu, Y.: Integral matrix gram root and lattice Gaussian sampling without floats. In: Canteaut, A., Ishai, Y. (eds.) EUROCRYPT 2020, Part II. LNCS, vol. 12106, pp. 608\u2013637. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-45724-2_21"},{"key":"6_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1007\/978-3-662-45608-8_2","volume-title":"Advances in Cryptology \u2013 ASIACRYPT 2014","author":"L Ducas","year":"2014","unstructured":"Ducas, L., Lyubashevsky, V., Prest, T.: Efficient identity-based encryption over NTRU lattices. In: Sarkar, P., Iwata, T. (eds.) ASIACRYPT 2014, Part II. LNCS, vol. 8874, pp. 22\u201341. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-45608-8_2"},{"key":"6_CR6","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"415","DOI":"10.1007\/978-3-642-34961-4_26","volume-title":"Advances in Cryptology \u2013 ASIACRYPT 2012","author":"L Ducas","year":"2012","unstructured":"Ducas, L., Nguyen, P.Q.: Faster Gaussian lattice sampling using lazy floating-point arithmetic. In: Wang, X., Sako, K. (eds.) ASIACRYPT 2012. LNCS, vol. 7658, pp. 415\u2013432. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-34961-4_26"},{"key":"6_CR7","doi-asserted-by":"publisher","unstructured":"Ducas, L., Prest, T.: Fast Fourier orthogonalization. In: Abramov, S.A., Zima, E.V., Gao, X. (eds.) Proceedings of the ACM on International Symposium on Symbolic and Algebraic Computation, ISSAC 2016, Waterloo, ON, Canada, 19\u201322 July 2016, pp. 191\u2013198. ACM (2016). https:\/\/doi.org\/10.1145\/2930889.2930923, http:\/\/doi.acm.org\/10.1145\/2930889.2930923","DOI":"10.1145\/2930889.2930923"},{"key":"6_CR8","doi-asserted-by":"publisher","unstructured":"Espitau, T., et al.: Mitaka: A simpler, parallelizable, maskable variant of Falcon. In: Dunkelman, O., Dziembowski, S. (eds.) EUROCRYPT\u00a02022, Part\u00a0III. LNCS, May\/June 2022, vol. 13277, pp. 222\u2013253. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-07082-2_9","DOI":"10.1007\/978-3-031-07082-2_9"},{"key":"6_CR9","doi-asserted-by":"publisher","unstructured":"Espitau, T., Nguyen, T.T.Q., Sun, C., Tibouchi, M., Wallet, A.: Antrag: annular NTRU trapdoor generation - making Mitaka as secure as Falcon. In: Guo, J., Steinfeld, R. (eds.) ASIACRYPT\u00a02023, Part\u00a0VII. LNCS, December 2023, vol. 14444, pp. 3\u201336. Springer, Singapore (2023). https:\/\/doi.org\/10.1007\/978-981-99-8739-9_1","DOI":"10.1007\/978-981-99-8739-9_1"},{"key":"6_CR10","unstructured":"Fourn\u00e9, M., et al.: \u201cThese results must be false\u201d: a usability evaluation of constant-time analysis tools. In: Balzarotti, D., Xu, W. (eds.) USENIX Security 2024. USENIX Association, August 2024 (2024). https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/fourne"},{"key":"6_CR11","doi-asserted-by":"publisher","unstructured":"Gama, N., Howgrave-Graham, N., Nguyen, P.Q.: Symplectic lattice reduction and NTRU. In: Vaudenay, S. (ed.) EUROCRYPT\u00a02006. LNCS, May\/June 2006, vol.\u00a04004, pp. 233\u2013253. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11761679_15","DOI":"10.1007\/11761679_15"},{"key":"6_CR12","doi-asserted-by":"publisher","unstructured":"Gentry, C., Peikert, C., Vaikuntanathan, V.: Trapdoors for hard lattices and new cryptographic constructions. In: Ladner, R.E., Dwork, C. (eds.) 40th ACM STOC, May 2008, pp. 197\u2013206. ACM Press (2008). https:\/\/doi.org\/10.1145\/1374376.1374407","DOI":"10.1145\/1374376.1374407"},{"key":"6_CR13","doi-asserted-by":"publisher","unstructured":"Halmans, S., van Vredendaal, C., Schneider, T., Custers, F., G\u00fcneysu, T.: TWFalcon: triple-word arithmetic for Falcon: giving Falcon the precision to fly securely. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2026(2), 347\u2013371 (2026). https:\/\/doi.org\/10.46586\/tches.v2026.i2.347-371, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/12892","DOI":"10.46586\/tches.v2026.i2.347-371"},{"key":"6_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1007\/BFb0054868","volume-title":"Algorithmic Number Theory","author":"J Hoffstein","year":"1998","unstructured":"Hoffstein, J., Pipher, J., Silverman, J.H.: NTRU: a ring-based public key cryptosystem. In: Buhler, J.P. (ed.) ANTS 1998. LNCS, vol. 1423, pp. 267\u2013288. Springer, Heidelberg (1998). https:\/\/doi.org\/10.1007\/BFb0054868"},{"key":"6_CR15","doi-asserted-by":"publisher","unstructured":"Howe, J., Prest, T., Ricosset, T., Rossi, M.: Isochronous Gaussian sampling: from inception to implementation. In: Ding, J., Tillich, J.P. (eds.) 11th International Conference on Post-Quantum Cryptography, PQCrypto 2020, pp. 53\u201371. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-44223-1_4","DOI":"10.1007\/978-3-030-44223-1_4"},{"key":"6_CR16","doi-asserted-by":"publisher","unstructured":"Jancar, J., et al.: \u201cThey\u2019re not that hard to mitigate\u201d: what cryptographic library developers think about timing attacks. In: 2022 IEEE Symposium on Security and Privacy, May 2022, pp. 632\u2013649. IEEE Computer Society Press (2022). https:\/\/doi.org\/10.1109\/SP46214.2022.9833713","DOI":"10.1109\/SP46214.2022.9833713"},{"key":"6_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1007\/978-3-030-56880-1_6","volume-title":"Advances in Cryptology \u2013 CRYPTO 2020","author":"P Kirchner","year":"2020","unstructured":"Kirchner, P., Espitau, T., Fouque, P.-A.: Fast reduction of algebraic lattices over cyclotomic fields. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO 2020, Part II. LNCS, vol. 12171, pp. 155\u2013185. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-56880-1_6"},{"key":"6_CR18","unstructured":"Klein, P.N.: Finding the closest lattice vector when it\u2019s unusually close. In: Shmoys, D.B. (ed.) 11th SODA, pp. 937\u2013941. ACM-SIAM, January 2000"},{"key":"6_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"239","DOI":"10.1007\/978-3-642-55220-5_14","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2014","author":"A Langlois","year":"2014","unstructured":"Langlois, A., Stehl\u00e9, D., Steinfeld, R.: GGHLite: more efficient multilinear maps from ideal lattices. In: Nguyen, P.Q., Oswald, E. (eds.) EUROCRYPT 2014. LNCS, vol. 8441, pp. 239\u2013256. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-642-55220-5_14"},{"key":"6_CR20","doi-asserted-by":"publisher","unstructured":"Lin, X., Tibouchi, M., Yu, Y., Zhang, S.: Do not disturb a sleeping falcon - floating-point error sensitivity of the Falcon sampler and its consequences. In: Fehr, S., Fouque, P.A. (eds.) EUROCRYPT\u00a02025, Part\u00a0II. LNCS, May 2025, vol. 15602, pp. 213\u2013244. Springer, Cham (2025). https:\/\/doi.org\/10.1007\/978-3-031-91124-8_8","DOI":"10.1007\/978-3-031-91124-8_8"},{"key":"6_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"738","DOI":"10.1007\/978-3-642-29011-4_43","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2012","author":"V Lyubashevsky","year":"2012","unstructured":"Lyubashevsky, V.: Lattice signatures without trapdoors. In: Pointcheval, D., Johansson, T. (eds.) EUROCRYPT 2012. LNCS, vol. 7237, pp. 738\u2013755. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-29011-4_43"},{"key":"6_CR22","doi-asserted-by":"publisher","unstructured":"Martel, M., Najahi, A., Revy, G.: Toward the synthesis of fixed-point code for matrix inversion based on Cholesky decomposition. In: Proceedings of the 2014 Conference on Design and Architectures for Signal and Image Processing, pp.\u00a01\u20138 (2014). https:\/\/doi.org\/10.1109\/DASIP.2014.7115609","DOI":"10.1109\/DASIP.2014.7115609"},{"key":"6_CR23","doi-asserted-by":"publisher","unstructured":"Micciancio, D., Regev, O.: Worst-case to average-case reductions based on Gaussian measures. SIAM J. Comput. (2007). https:\/\/doi.org\/10.1137\/S0097539705447360,","DOI":"10.1137\/S0097539705447360"},{"key":"6_CR24","unstructured":"Pornin, T.: Improved key pair generation for falcon, BAT and hawk. Cryptology ePrint Archive, Report 2023\/290 (2023). https:\/\/eprint.iacr.org\/2023\/290"},{"key":"6_CR25","unstructured":"Pornin, T.: Improved (again) key pair generation for falcon, BAT and hawk. Cryptology ePrint Archive, Paper 2025\/1239 (2025). https:\/\/eprint.iacr.org\/2025\/1239"},{"key":"6_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"504","DOI":"10.1007\/978-3-030-17259-6_17","volume-title":"Public-Key Cryptography \u2013 PKC 2019","author":"T Pornin","year":"2019","unstructured":"Pornin, T., Prest, T.: More efficient algorithms for the NTRU key generation using the field norm. In: Lin, D., Sako, K. (eds.) PKC 2019, Part II. LNCS, vol. 11443, pp. 504\u2013533. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-17259-6_17"},{"key":"6_CR27","unstructured":"Prest, T.: Gaussian Sampling in Lattice-Based Cryptography. Theses, \u00c9cole Normale Sup\u00e9rieure, December 2015. https:\/\/tel.archives-ouvertes.fr\/tel-01245066"},{"key":"6_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"347","DOI":"10.1007\/978-3-319-70694-8_13","volume-title":"Advances in Cryptology \u2013 ASIACRYPT 2017","author":"T Prest","year":"2017","unstructured":"Prest, T.: Sharper bounds in lattice-based cryptography using the R\u00e9nyi divergence. In: Takagi, T., Peyrin, T. (eds.) ASIACRYPT 2017. LNCS, vol. 10624, pp. 347\u2013374. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-70694-8_13"},{"key":"6_CR29","unstructured":"Prest, T., et al.: FALCON. Tech. rep., National Institute of Standards and Technology (2020). https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/post-quantum-cryptography-standardization\/round-3-submissions"},{"key":"6_CR30","unstructured":"Stehl\u00e9, D., Steinfeld, R.: Making NTRUEncrypt and NTRUSign as secure as standard worst-case problems over ideal lattices. Cryptology ePrint Archive, Report 2013\/004 (2013). https:\/\/eprint.iacr.org\/2013\/004"},{"key":"6_CR31","unstructured":"Sun, C., Espitau, T., Song, J., Han, J., Tibouchi, M.: Generating Falcon Trapdoors via Gibbs sampler. Cryptology ePrint Archive, Paper 2026\/116 (2026). Accepted at PQCRYPTO 2026. https:\/\/eprint.iacr.org\/2026\/116"},{"key":"6_CR32","doi-asserted-by":"publisher","unstructured":"Sun, S., Zhou, Y., Zhang, R., Tao, Y., Qiao, Z., Ming, J.: Fast Fourier orthogonalization over NTRU lattices. In: Alcaraz, C., Chen, L., Li, S., Samarati, P. (eds.) Proceedings of the 24th International Conference on Information and Communications Security, ICICS 2022. LNCS, Canterbury, UK, 5\u20138 September 2022, vol. 13407, pp. 109\u2013127. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-15777-6_7, https:\/\/doi.org\/10.1007\/978-3-031-15777-6_7","DOI":"10.1007\/978-3-031-15777-6_7"},{"key":"6_CR33","unstructured":"Yates, R.: Fixed-point arithmetic: an introduction (2024). http:\/\/www.digitalsignallabs.com\/downloads\/fp.pdf"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 CRYPTO 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-35377-1_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,9]],"date-time":"2026-08-09T02:46:25Z","timestamp":1786243585000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-35377-1_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032353764","9783032353771"],"references-count":33,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-35377-1_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"9 August 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CRYPTO","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Cryptology Conference","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Santa Barbara, CA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 August 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 August 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"46","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"crypto2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/crypto.iacr.org\/2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}