{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T10:35:17Z","timestamp":1786530917348,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":73,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032354143","type":"print"},{"value":"9783032354150","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-35415-0_11","type":"book-chapter","created":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T10:01:52Z","timestamp":1786528912000},"page":"326-358","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Formal Security Proof of\u00a0Masking"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9754-6792","authenticated-orcid":false,"given":"Rei","family":"Ueno","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0173-7245","authenticated-orcid":false,"given":"Akiko","family":"Inoue","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3427-6772","authenticated-orcid":false,"given":"Kazuhiko","family":"Minematsu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4602-7570","authenticated-orcid":false,"given":"Akira","family":"Ito","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0864-3126","authenticated-orcid":false,"given":"Naofumi","family":"Homma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,8,13]]},"reference":[{"key":"11_CR1","doi-asserted-by":"publisher","unstructured":"Aikata, A., Basso, A., Cassiers, G., Mert, A.C., Sinha\u00a0Roy, S.: Kavach: Lightweight masking techniques for polynomial arithmetic in lattice-based cryptography. IACR Trans. Cryptographic Hardware Embed. Syst. 2023(3), 366\u2013390 (2023). https:\/\/doi.org\/10.46586\/tches.v2023.i3.366-390, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/10967","DOI":"10.46586\/tches.v2023.i3.366-390"},{"key":"11_CR2","doi-asserted-by":"publisher","unstructured":"Azouaoui, M., et al.: Protecting Dilithium against leakage: revisited sensitivity analysis and improved implementations. IACR Trans. Cryptographic Hardware Embed. Syst. (4), 58\u201379 (2023). https:\/\/doi.org\/10.46586\/tches.v2023.i4.58-79, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/11158","DOI":"10.46586\/tches.v2023.i4.58-79"},{"issue":"3","key":"11_CR3","doi-asserted-by":"publisher","first-page":"483","DOI":"10.46586\/tches.v2020.i3.483-507","volume":"2020","author":"F Bache","year":"2020","unstructured":"Bache, F., Paglialong, C., Oder, T., Schneider, T., G\u00fcneysu, T.: High-speed masking for polynomial comparison in lattice-based KEMs. IACR Trans. Cryptographic Hardware Embed. Syst. 2020(3), 483\u2013507 (2020)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."},{"key":"11_CR4","doi-asserted-by":"publisher","unstructured":"Balon, B., Grassi, L., M\u00e9aux, P., Moos, T., Standaert, F.X., Steiner, M.J.: mid-pSquare: leveraging the strong side-channel security of prime-field masking in software. IACR Trans. Cryptographic Hardware Embed. Syst. 2025(4), 486\u2013519 (2025). https:\/\/doi.org\/10.46586\/tches.v2025.i4.486-519, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/12419","DOI":"10.46586\/tches.v2025.i4.486-519"},{"key":"11_CR5","doi-asserted-by":"crossref","unstructured":"Barthe, G., et al.: Strong non-interference and type-directed higher-order masking. In: ACM SIGSAC Conference on Computer and Communications Security (CCS 2016), pp. 116\u2013129 (2016)","DOI":"10.1145\/2976749.2978427"},{"key":"11_CR6","doi-asserted-by":"publisher","unstructured":"B\u00e9guinot, J., Masure, L.: On the average random probing model. IACR Trans. Cryptographic Hardware Embed. Syst. 2025(3), 32\u201355 (2025). https:\/\/doi.org\/10.46586\/tches.v2025.i3.32-55","DOI":"10.46586\/tches.v2025.i3.32-55"},{"key":"11_CR7","doi-asserted-by":"publisher","unstructured":"B\u00e9guinot, J., Cheng, W., Guilley, S., Liu, Y., Masure, L., Rioul, O., Standaert, F.X.: Removing the field size loss from Duc et al.\u2019s conjectured bound for masked encodings. In: International Workshop on Constructive Side-Channel Analysis and Secure Design (COSADE), pp. 86\u2013104 (2023). https:\/\/doi.org\/10.1007\/978-3-031-29497-6_5","DOI":"10.1007\/978-3-031-29497-6_5"},{"key":"11_CR8","doi-asserted-by":"publisher","unstructured":"B\u00e9guinot, J., Cheng, W., Guilley, S., Rioul, O.: Formal security proofs via Doeblin coefficients: optimal side-channel factorization from noisy leakage to random probing. In: Advances in Cryptology\u2014CRYPTO 2024: 44th Annual International Cryptology Conference, Part VI, pp. 389\u2013426 (2024). https:\/\/doi.org\/10.1007\/978-3-031-68391-6_12","DOI":"10.1007\/978-3-031-68391-6_12"},{"key":"11_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"339","DOI":"10.1007\/978-3-030-56784-2_12","volume-title":"Advances in Cryptology \u2013 CRYPTO 2020","author":"S Bela\u00efd","year":"2020","unstructured":"Bela\u00efd, S., Coron, J.-S., Prouff, E., Rivain, M., Taleb, A.R.: Random probing security: verification, composition, expansion and new constructions. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO 2020. LNCS, vol. 12170, pp. 339\u2013368. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-56784-2_12"},{"key":"11_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"313","DOI":"10.1007\/978-3-030-77886-6_11","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2021","author":"S Bela\u00efd","year":"2021","unstructured":"Bela\u00efd, S., Rivain, M., Taleb, A.R.: On the power of expansion: more efficient constructions in the random probing model. In: Canteaut, A., Standaert, F.-X. (eds.) EUROCRYPT 2021. LNCS, vol. 12697, pp. 313\u2013343. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-77886-6_11"},{"key":"11_CR11","doi-asserted-by":"publisher","unstructured":"Bela\u00efd, S., Rivain, M., Rossi, M.: New techniques for random probing security and application to Raccoon signature scheme. In: Advances in Cryptology\u2014EUROCRYPT 2025, pp. 94\u2013123. Springer (2025). https:\/\/doi.org\/10.1007\/978-3-031-91101-9_4","DOI":"10.1007\/978-3-031-91101-9_4"},{"key":"11_CR12","doi-asserted-by":"crossref","unstructured":"Bela\u00efd, S., Rivain, M., Taleb, A.R., Vergnaud, D.: Dynamic random probing expansion with quasi linear asymptotic complexity. In: Advances in Cryptology\u2014ASIACRYPT 2021, pp. 157\u2013188 (2021)","DOI":"10.1007\/978-3-030-92075-3_6"},{"key":"11_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"531","DOI":"10.1007\/978-3-319-96884-1_18","volume-title":"Advances in Cryptology \u2013 CRYPTO 2018","author":"F Benhamouda","year":"2018","unstructured":"Benhamouda, F., Degwekar, A., Ishai, Y., Rabin, T.: On the local leakage resilience of linear secret sharing schemes. In: Shacham, H., Boldyreva, A. (eds.) CRYPTO 2018. LNCS, vol. 10991, pp. 531\u2013561. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-96884-1_18"},{"key":"11_CR14","unstructured":"Bernstein, D.J.: ChaCha20, a variant of Salsa20 (2025). https:\/\/cr.yp.to\/chacha\/chacha-20080128.pdf"},{"key":"11_CR15","doi-asserted-by":"publisher","unstructured":"Berti, F., Bhasin, S., Breier, J., Hou, X., Poussier, R., Standaert, F.X., Udvarhelyi, B.: A finer-grain analysis of the leakage (non) resilience of OCB. IACR Trans. Cryptographic Hardware Embed. Syst. 2022, 461\u2013481 (2021). https:\/\/doi.org\/10.46586\/tches.v2022.i1.461-481, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/9304","DOI":"10.46586\/tches.v2022.i1.461-481"},{"issue":"4","key":"11_CR16","doi-asserted-by":"publisher","first-page":"420","DOI":"10.46586\/tches.v2023.i4.420-459","volume":"2023","author":"F Berti","year":"2023","unstructured":"Berti, F., Faust, S., Orlt, M.: Provable secure parallel gadgets. IACR Trans. Cryptographic Hardware Embed. Syst. 2023(4), 420\u2013459 (2023)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."},{"key":"11_CR17","doi-asserted-by":"publisher","unstructured":"Berti, F., Guo, C., Pereira, O., Peters, T., Standaert, F.X.: TEDT, a leakage-resist AEAD mode for high physical security applications. IACR Trans. Cryptographic Hardware Embed. Syst. 2020(1), 256\u2013320 (2019). https:\/\/doi.org\/10.13154\/tches.v2020.i1.256-320","DOI":"10.13154\/tches.v2020.i1.256-320"},{"key":"11_CR18","doi-asserted-by":"crossref","unstructured":"Beyne, T., Verbauwhede, T.: Integral cryptanalysis in characteristic $$p$$. Asiacrypt 2025 (2025). https:\/\/eprint.iacr.org\/2025\/932","DOI":"10.1007\/978-981-95-5018-0_3"},{"key":"11_CR19","doi-asserted-by":"publisher","unstructured":"Bos, J.W., Gourjon, M., Renes, J., Schneider, T., van Vredendaal, C.: Masking Kyber: first- and higher-order implementations. IACR Trans. Cryptographic Hardware Embed. Syst. 2021(4), 173\u2013214 (2021). https:\/\/doi.org\/10.46586\/tches.v2021.i4.173-214, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/9064","DOI":"10.46586\/tches.v2021.i4.173-214"},{"key":"11_CR20","doi-asserted-by":"crossref","unstructured":"Brian, G., Dziembowski, S., Faust, S.: From random probing to noisy leakages without field-size dependence. In: Advances in Cryptology\u2014EUROCRYPT 2024, pp. 345\u2013374. Springer (2024)","DOI":"10.1007\/978-3-031-58737-5_13"},{"key":"11_CR21","doi-asserted-by":"publisher","unstructured":"Cassiers, G., Masure, L., Momin, C., Moos, T., Standaert, F.X.: Prime-field masking in hardware and its soundness against low-noise SCA attacks. IACR Trans. Cryptographic Hardware Embed. Syst. 2023(2), 482\u2013518 (2023). https:\/\/doi.org\/10.46586\/tches.v2023.i2.482-518, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/10291","DOI":"10.46586\/tches.v2023.i2.482-518"},{"key":"11_CR22","doi-asserted-by":"publisher","first-page":"2542","DOI":"10.1109\/TIFS.2020.2971153","volume":"15","author":"G Cassiers","year":"2020","unstructured":"Cassiers, G., Standaert, F.X.: Trivially and efficiently composing masked gadgets with probe isolating non-interference. IEEE Trans. Inf. Forensics Secur. 15, 2542\u20132555 (2020). https:\/\/doi.org\/10.1109\/TIFS.2020.2971153","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"5","key":"11_CR23","doi-asserted-by":"publisher","first-page":"1991","DOI":"10.1109\/TIT.2008.920247","volume":"54","author":"D Chakraborty","year":"2008","unstructured":"Chakraborty, D., Sarkar, P.: A general construction of tweakable block ciphers and different modes of operations. IEEE Trans. Inf. Theory 54(5), 1991\u20132006 (2008)","journal-title":"IEEE Trans. Inf. Theory"},{"key":"11_CR24","doi-asserted-by":"crossref","unstructured":"Chari, S., Jutla, C.S., Rao, J.R., Rohatgi, P.: Towards sound approaches to counteract power-analysis attacks. In: Advances in Cryptology\u2014CRYPTO\u2019 99, pp. 398\u2013412 (1999)","DOI":"10.1007\/3-540-48405-1_26"},{"key":"11_CR25","doi-asserted-by":"crossref","unstructured":"Chari, S., Rao, J.R., Rohatgi, P.: Template attacks. In: International Workshop on Cryptographic Hardware and Embedded Systems. LNCS, pp. 13\u201328 (2002)","DOI":"10.1007\/3-540-36400-5_3"},{"issue":"2","key":"11_CR26","doi-asserted-by":"publisher","first-page":"49","DOI":"10.46586\/tches.v2019.i2.49-79","volume":"2019","author":"E de Ch\u00e9risey","year":"2019","unstructured":"de Ch\u00e9risey, E., Guilley, S., Rioul, O., Piantanida, P.: Best information is most successful: mutual information and success rate in side-channel analysis. IACR Trans. Cryptographic Hardware Embed. Syst. 2019(2), 49\u201379 (2019)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."},{"key":"11_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-319-64647-3_1","volume-title":"Constructive Side-Channel Analysis and Secure Design","author":"T De Cnudde","year":"2017","unstructured":"De Cnudde, T., Bilgin, B., Gierlichs, B., Nikov, V., Nikova, S., Rijmen, V.: Does coupling affect the security of masked implementations? In: Guilley, S. (ed.) COSADE 2017. LNCS, vol. 10348, pp. 1\u201318. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-64647-3_1"},{"key":"11_CR28","doi-asserted-by":"publisher","unstructured":"Coron, J.S., G\u00e9rard, F., Montoya, S., Zeitoun, R.: High-order polynomial comparison and masking lattice-based encryption. IACR Trans. Cryptographic Hardware Embed. Syst. 2023(1), 153\u2013192 (2022). https:\/\/doi.org\/10.46586\/tches.v2023.i1.153-192, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/9950","DOI":"10.46586\/tches.v2023.i1.153-192"},{"key":"11_CR29","doi-asserted-by":"publisher","unstructured":"Coron, J.S., G\u00e9rard, F., Montoya, S., Zeitoun, R.: High-order table-based conversion algorithms and masking lattice-based encryption. IACR Trans. Cryptographic Hardware Embed. Syst. 2022, 1\u201340 (2022). https:\/\/doi.org\/10.46586\/tches.v2022.i2.1-40, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/9479","DOI":"10.46586\/tches.v2022.i2.1-40"},{"key":"11_CR30","doi-asserted-by":"publisher","unstructured":"Coron, J.S., G\u00e9rard, F., Trannoy, M., Zeitoun, R.: High-order masking of NTRU. IACR Trans. Cryptographic Hardware Embed. Syst. 2023(2), 180\u2013211 (2023). https:\/\/doi.org\/10.46586\/tches.v2023.i2.180-211, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/10281","DOI":"10.46586\/tches.v2023.i2.180-211"},{"key":"11_CR31","doi-asserted-by":"publisher","unstructured":"Coron, J.S., G\u00e9rard, F., Trannoy, M., Zeitoun, R.: Improved gadgets for the high-order masking of dilithium. IACR Trans. Cryptographic Hardware Embed. Syst. 2023(4), 110\u2013145 (2023). https:\/\/doi.org\/10.46586\/tches.v2023.i4.110-145, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/11160","DOI":"10.46586\/tches.v2023.i4.110-145"},{"key":"11_CR32","unstructured":"Cover, T.M., Thomas, J.A.: Elements of Information Theory (Wiley Series in Telecommunications and Signal Processing). Wiley-Interscience, USA (2006)"},{"key":"11_CR33","doi-asserted-by":"crossref","unstructured":"Daemen, J.: Changing of the guards: a simple and efficient method for achieving uniformity in threshold sharing. In: International Conference on Cryptographic Hardware and Embedded Systems, pp. 137\u2013153. Springer International Publishing (2017)","DOI":"10.1007\/978-3-319-66787-4_7"},{"key":"11_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"423","DOI":"10.1007\/978-3-642-55220-5_24","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2014","author":"A Duc","year":"2014","unstructured":"Duc, A., Dziembowski, S., Faust, S.: Unifying leakage models: from probing attacks to noisy leakage. In: Nguyen, P.Q., Oswald, E. (eds.) EUROCRYPT 2014. LNCS, vol. 8441, pp. 423\u2013440. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-642-55220-5_24"},{"key":"11_CR35","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"401","DOI":"10.1007\/978-3-662-46800-5_16","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2015","author":"A Duc","year":"2015","unstructured":"Duc, A., Faust, S., Standaert, F.-X.: Making masking security proofs concrete. In: Oswald, E., Fischlin, M. (eds.) EUROCRYPT 2015. LNCS, vol. 9056, pp. 401\u2013429. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-46800-5_16"},{"key":"11_CR36","doi-asserted-by":"crossref","unstructured":"Dworkin, M.: Recommendation for Block Cipher Modes of Operation: The XTS-AES Mode for Confidentiality on Storage Devices. Standard, National Institute of Standards and Technology (2010)","DOI":"10.6028\/NIST.SP.800-38e"},{"key":"11_CR37","doi-asserted-by":"crossref","unstructured":"Dziembowski, S., Faust, S., Sk\u00f3rski, M.: Optimal amplification of noisy leakages. In: Theory of Cryptography, pp. 291\u2013318 (2016)","DOI":"10.1007\/978-3-662-49099-0_11"},{"key":"11_CR38","doi-asserted-by":"publisher","unstructured":"D\u2019Anvers, J.P., Heinz, D., Pessl, P., Van\u00a0Beirendonck, M., Verbauwhede, I.: Higher-order masked ciphertext comparison for lattice-based cryptography. IACR Trans. Cryptographic Hardware Embed. Syst. 2022(2), 115\u2013139 (2022). https:\/\/doi.org\/10.46586\/tches.v2022.i2.115-139, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/9483","DOI":"10.46586\/tches.v2022.i2.115-139"},{"key":"11_CR39","doi-asserted-by":"crossref","unstructured":"Faust, S., Grosso, V., Merino Del Pozo, S., Paglialonga, C., Standaert, F.X.: Composable masking schemes in the presence of physical defaults & the robust probing model. IACR Trans. Cryptographic Hardware Embed. Syst. 2018(3), 89\u2013120 (2018)","DOI":"10.46586\/tches.v2018.i3.89-120"},{"key":"11_CR40","doi-asserted-by":"publisher","unstructured":"Faust, S., Masure, L., Micheli, E., Orlt, M., Standaert, F.: Connecting leakage-resilient secret sharing to practice: scaling trends and physical dependencies of prime field masking. In: Joye, M., Leander, G. (eds.) Advances in Cryptology\u2014EUROCRYPT, pp. 316\u2013344 (2024). https:\/\/doi.org\/10.1007\/978-3-031-58737-5_12","DOI":"10.1007\/978-3-031-58737-5_12"},{"issue":"6","key":"11_CR41","doi-asserted-by":"publisher","first-page":"1491","DOI":"10.1109\/TIT.2003.811927","volume":"49","author":"AA Fedotov","year":"2003","unstructured":"Fedotov, A.A., Harremo\u00ebs, P., Topsoe, F.: Refinements of Pinsker\u2019s inequality. IEEE Trans. Inf. Theory 49(6), 1491\u20131498 (2003). https:\/\/doi.org\/10.1109\/TIT.2003.811927","journal-title":"IEEE Trans. Inf. Theory"},{"issue":"1","key":"11_CR42","first-page":"152","volume":"2020","author":"S Gao","year":"2020","unstructured":"Gao, S., Marshall, B., Page, D., Oswald, E.: Share-slicing: friend or foe? IACR Trans. Cryptographic Hardware Embed. Syst. 2020(1), 152\u2013174 (2020)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."},{"key":"11_CR43","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"263","DOI":"10.1007\/978-3-662-49890-3_11","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2016","author":"R Granger","year":"2016","unstructured":"Granger, R., Jovanovic, P., Mennink, B., Neves, S.: Improved masking for tweakable blockciphers with applications to authenticated encryption. In: Fischlin, M., Coron, J.-S. (eds.) EUROCRYPT 2016. LNCS, vol. 9665, pp. 263\u2013293. Springer, Heidelberg (2016). https:\/\/doi.org\/10.1007\/978-3-662-49890-3_11"},{"key":"11_CR44","doi-asserted-by":"crossref","unstructured":"Heuser, A., Rioul, O., Guilley, S.: Good is not good enough: deriving optimal distinguishers from communication theory. In: International Workshop on Cryptographic Hardware and Embedded Systems, pp. 55\u201374 (2014)","DOI":"10.1007\/978-3-662-44709-3_4"},{"key":"11_CR45","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"463","DOI":"10.1007\/978-3-540-45146-4_27","volume-title":"Advances in Cryptology - CRYPTO 2003","author":"Y Ishai","year":"2003","unstructured":"Ishai, Y., Sahai, A., Wagner, D.: Private circuits: securing hardware against probing attacks. In: Boneh, D. (ed.) CRYPTO 2003. LNCS, vol. 2729, pp. 463\u2013481. Springer, Heidelberg (2003). https:\/\/doi.org\/10.1007\/978-3-540-45146-4_27"},{"key":"11_CR46","unstructured":"Ito, A., Ueno, R., Homma, N.: Toward optimal deep-learning based side-channel attacks: probability concentration inequality loss and its usage. Cryptology ePrint Archive, Report 2021\/1216 (2021). https:\/\/ia.cr\/2021\/1216"},{"key":"11_CR47","doi-asserted-by":"crossref","unstructured":"Ito, A., Ueno, R., Homma, N.: On the success rate of side-channel attacks on masked implementations: information-theoretical bounds and their practical usage. In: ACM SIGSAC Conference on Computer and Communications Security (CCS 2022), pp. 1521\u20131535 (2022)","DOI":"10.1145\/3548606.3560579"},{"key":"11_CR48","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1007\/978-3-642-32009-5_3","volume-title":"Advances in Cryptology \u2013 CRYPTO 2012","author":"T Iwata","year":"2012","unstructured":"Iwata, T., Ohashi, K., Minematsu, K.: Breaking and repairing GCM security proofs. In: Safavi-Naini, R., Canetti, R. (eds.) CRYPTO 2012. LNCS, vol. 7417, pp. 31\u201349. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-32009-5_3"},{"key":"11_CR49","doi-asserted-by":"crossref","unstructured":"Jahandideh, V., Mennink, B., Batina, L.: A decomposition approach for evaluating security of masking. In: Advances in Cryptology\u2014ASIACRYPT 2025, pp. 580\u2013612 (2025)","DOI":"10.1007\/978-981-95-5018-0_19"},{"key":"11_CR50","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"388","DOI":"10.1007\/3-540-48405-1_25","volume-title":"Advances in Cryptology \u2014 CRYPTO\u2019 99","author":"P Kocher","year":"1999","unstructured":"Kocher, P., Jaffe, J., Jun, B.: Differential power analysis. In: Wiener, M. (ed.) CRYPTO 1999. LNCS, vol. 1666, pp. 388\u2013397. Springer, Heidelberg (1999). https:\/\/doi.org\/10.1007\/3-540-48405-1_25"},{"key":"11_CR51","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"306","DOI":"10.1007\/978-3-642-21702-9_18","volume-title":"Fast Software Encryption","author":"T Krovetz","year":"2011","unstructured":"Krovetz, T., Rogaway, P.: The software performance of authenticated-encryption modes. In: Joux, A. (ed.) FSE 2011. LNCS, vol. 6733, pp. 306\u2013327. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-21702-9_18"},{"key":"11_CR52","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1007\/3-540-45708-9_3","volume-title":"Advances in Cryptology \u2014 CRYPTO 2002","author":"M Liskov","year":"2002","unstructured":"Liskov, M., Rivest, R.L., Wagner, D.: Tweakable block ciphers. In: Yung, M. (ed.) CRYPTO 2002. LNCS, vol. 2442, pp. 31\u201346. Springer, Heidelberg (2002). https:\/\/doi.org\/10.1007\/3-540-45708-9_3"},{"key":"11_CR53","doi-asserted-by":"crossref","unstructured":"Maji, H.K., Nguyen, H.H., Paskin-Cherniavsky, A., Suad, T., Wang, M., Ye, X., Yu, A.: Tight estimate of the local leakage resilience of the additive secret-sharing scheme & its consequences. In: Information-Theoretic Cryptography (ITC) (2022)","DOI":"10.1109\/ISIT50566.2022.9834695"},{"key":"11_CR54","doi-asserted-by":"crossref","unstructured":"Mangard, S., Pramstaller, N., Oswald, E.: Successfully attacking masked AES hardware implementations. In: International Workshop on Cryptographic Hardware and Embedded Systems, pp. 157\u2013171 (2005)","DOI":"10.1007\/11545262_12"},{"key":"11_CR55","doi-asserted-by":"crossref","unstructured":"Masure, L., M\u00e9aux, P., Moos, T., Standaert, F.X.: Effective and efficient masking with low noise using small-Mersenne-prime ciphers. In: Advances in Cryptology\u2014EUROCRYPT 2023, pp. 596\u2013627 (2023)","DOI":"10.1007\/978-3-031-30634-1_20"},{"key":"11_CR56","doi-asserted-by":"publisher","unstructured":"Masure, L., Rioul, O., Standaert, F.X.: A nearly tight proof of Duc et al.\u2019s conjectured security bound for masked implementations. In: Smart Card Research and Advanced Applications: 21st International Conference, CARDIS 2022, pp. 69\u201381 (2022). https:\/\/doi.org\/10.1007\/978-3-031-25319-5_4","DOI":"10.1007\/978-3-031-25319-5_4"},{"key":"11_CR57","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"630","DOI":"10.1007\/978-3-030-64837-4_21","volume-title":"Advances in Cryptology \u2013 ASIACRYPT 2020","author":"B Mennink","year":"2020","unstructured":"Mennink, B.: Beyond birthday bound secure fresh rekeying: application to authenticated encryption. In: Moriai, S., Wang, H. (eds.) ASIACRYPT 2020. LNCS, vol. 12491, pp. 630\u2013661. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-64837-4_21"},{"key":"11_CR58","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1007\/978-3-642-41227-1_13","volume-title":"Provable Security","author":"K Minematsu","year":"2013","unstructured":"Minematsu, K.: A short universal hash function from bit rotation, and applications to blockcipher modes. In: Susilo, W., Reyhanitabar, R. (eds.) ProvSec 2013. LNCS, vol. 8209, pp. 221\u2013238. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-41227-1_13"},{"issue":"1","key":"11_CR59","doi-asserted-by":"publisher","first-page":"142","DOI":"10.46586\/tches.v2018.i1.142-174","volume":"2018","author":"T Oder","year":"2018","unstructured":"Oder, T., Schneider, T., P\u00f6ppelmann, T., G\u00fcneysu, T.: Practical CCA2-secure and masked ring-LWE implementation. IACR Trans. Cryptographic Hardware Embed. Syst. 2018(1), 142\u2013174 (2018)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."},{"key":"11_CR60","doi-asserted-by":"publisher","unstructured":"del Pino, R., Prest, T., Rossi, M., Saarinen, M.J.O.: High-order masking of lattice signatures in quasilinear time. In: 2023 IEEE Symposium on Security and Privacy (SP), pp. 1168\u20131185 (2023). https:\/\/doi.org\/10.1109\/SP46215.2023.10179342","DOI":"10.1109\/SP46215.2023.10179342"},{"key":"11_CR61","unstructured":"Pinsker, M.S., Feinstein, A.: Information and information stability of random variables and processes, vol. 12, Holden-Day San Francisco (1964)"},{"key":"11_CR62","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"142","DOI":"10.1007\/978-3-642-38348-9_9","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2013","author":"E Prouff","year":"2013","unstructured":"Prouff, E., Rivain, M.: Masking against side-channel attacks: a formal security proof. In: Johansson, T., Nguyen, P.Q. (eds.) EUROCRYPT 2013. LNCS, vol. 7881, pp. 142\u2013159. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-38348-9_9"},{"key":"11_CR63","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"764","DOI":"10.1007\/978-3-662-47989-6_37","volume-title":"Advances in Cryptology \u2013 CRYPTO 2015","author":"O Reparaz","year":"2015","unstructured":"Reparaz, O., Bilgin, B., Nikova, S., Gierlichs, B., Verbauwhede, I.: Consolidating masking schemes. In: Gennaro, R., Robshaw, M. (eds.) CRYPTO 2015. LNCS, vol. 9215, pp. 764\u2013783. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-47989-6_37"},{"key":"11_CR64","unstructured":"Rezaeezade, A., Yap, T., Jap, D., Bhasin, S., Picek, S.: Breaking the blindfold: deep learning-based blind side-channel analysis. In: 34th USENIX Security Symposium (2025)"},{"key":"11_CR65","doi-asserted-by":"crossref","unstructured":"Rivain, M., Prouff, E.: Provably secure higher-order masking of AES. In: International Workshop on Cryptographic Hardware and Embedded Systems (CHES), pp. 413\u2013427 (2010)","DOI":"10.1007\/978-3-642-15031-9_28"},{"key":"11_CR66","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1007\/978-3-540-30539-2_2","volume-title":"Advances in Cryptology - ASIACRYPT 2004","author":"P Rogaway","year":"2004","unstructured":"Rogaway, P.: Efficient instantiations of tweakable blockciphers and refinements to modes OCB and PMAC. In: Lee, P.J. (ed.) ASIACRYPT 2004. LNCS, vol. 3329, pp. 16\u201331. Springer, Heidelberg (2004). https:\/\/doi.org\/10.1007\/978-3-540-30539-2_2"},{"issue":"11","key":"11_CR67","doi-asserted-by":"publisher","first-page":"612","DOI":"10.1145\/359168.359176","volume":"22","author":"A Shamir","year":"1979","unstructured":"Shamir, A.: How to share a secret. Commun. ACM 22(11), 612\u2013613 (1979). https:\/\/doi.org\/10.1145\/359168.359176","journal-title":"Commun. ACM"},{"key":"11_CR68","doi-asserted-by":"publisher","first-page":"135","DOI":"10.46586\/tches.v2022.i4.135-162","volume":"4","author":"Y Shen","year":"2022","unstructured":"Shen, Y., Peters, T., Standaert, F.X., Cassiers, G., Verhamme, C.: Triplex: an efficient and one-pass leakage-resistant mode of operation. IACR Trans. Cryptographic Hardware Embed. Syst. 4, 135\u2013162 (2022)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."},{"key":"11_CR69","doi-asserted-by":"publisher","unstructured":"Tibouchi, M.: Security Reduction, pp. 2333\u20132335. Springer Nature Switzerland (2025). https:\/\/doi.org\/10.1007\/978-3-030-71522-9_515","DOI":"10.1007\/978-3-030-71522-9_515"},{"issue":"2024","key":"11_CR70","doi-asserted-by":"publisher","first-page":"264","DOI":"10.46586\/tches.v2024.i1.264-308","volume":"1","author":"R Ueno","year":"2023","unstructured":"Ueno, R., Homma, N., Inoue, A., Minematsu, K.: Fallen sanctuary: a higher-order and leakage-resilient rekeying scheme. IACR Trans. Cryptographic Hardware Embed. Syst. 1(2024), 264\u2013308 (2023)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."},{"key":"11_CR71","doi-asserted-by":"publisher","unstructured":"Ueno, R., Ito, A., Todo, Y., Inoue, A., Minematsu, K., Ishikawa, H., Homma, N.: All you need is XOR-convolution: a generalized higher-order side-channel attack with application to XEX\/XE-based encryptions. IACR Trans. Cryptographic Hardware Embed. Syst. 2025(3), 317\u2013360 (2025). https:\/\/doi.org\/10.46586\/tches.v2025.i3.317-360, https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/12219","DOI":"10.46586\/tches.v2025.i3.317-360"},{"key":"11_CR72","doi-asserted-by":"crossref","unstructured":"Veyrat-Charvillon, N., G\u00e9rard, B., Renauld, M., Standaert, F.X.: An optimal key enumeration algorithm and its application to side-channel attacks. In: Selected Areas in Cryptography (2013)","DOI":"10.1007\/978-3-642-35999-6_25"},{"issue":"1","key":"11_CR73","doi-asserted-by":"publisher","first-page":"523","DOI":"10.46586\/tches.v2025.i1.523-551","volume":"2025","author":"B Wang","year":"2024","unstructured":"Wang, B., Ji, F., Sun, Y., Wang, W.: Random probing security with precomputation. IACR Trans. Cryptographic Hardware Embed. Syst. 2025(1), 523\u2013551 (2024)","journal-title":"IACR Trans. Cryptographic Hardware Embed. Syst."}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 CRYPTO 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-35415-0_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T10:02:12Z","timestamp":1786528932000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-35415-0_11"}},"subtitle":["Reduction from Strong Noisy Leakage to Probing Model Without Random Probing and Application to LR Primitive"],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032354143","9783032354150"],"references-count":73,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-35415-0_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"13 August 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CRYPTO","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Cryptology Conference","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Santa Barbara, CA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 August 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 August 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"46","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"crypto2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/crypto.iacr.org\/2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}