Search

Lattice-based cryptography, as an active branch of post-quantum cryptography (PQC), has drawn great attention from side-channel analysis researchers in recent years. Despite the various side-channel targets examined in previous studies, detail on revealing the secret-dependent information efficiently is less studied. In this paper, we propose adaptive EM side-channel attacks with carefully constructed ciphertexts on Kyber, which is a finalist of NIST PQC standardization project. We demonstrate that specially chosen ciphertexts allow an adversary to modulate the leakage of a target device and enable full key extraction with a small number of traces through simple power analysis. Compared to prior research, our techniques require fewer traces and avoid building complex templates. We practically evaluate our methods using both a reference implementation and the ARM-specific implementation in pqm4 library. For the reference implementation, we target the leakage of the output of the inverse NTT computation and recover the full key with only four traces. For the pqm4 implementation, we develop a message-recovery attack that leads to extraction of the full secret key with between eight and 960 traces, depending on the compiler optimization level. We discuss the relevance of our findings to other lattice-based schemes and explore potential countermeasures. [ABSTRACT FROM AUTHOR]

The rapid development of network applications has led to a dramatic demand on Internet capacity. In response, internet service providers are exploring new data pricing approaches as economic countermeasures. However, previous pricing schemes are inadequate to provide tussle-resistance property that enables confidential price propagation and accurate bandwidth accounting. In this letter, we propose tussle-resistant Internet pricing mechanism (TRIP), which is built upon border gateway protocol and involves multiple cryptographic algorithms for price encryption and dissemination. TRIP effectively accomplishes source authentication and price confirmation, and leverages network capability to achieve bandwidth allocation and accounting. We confirm the efficiency of TRIP via comprehensive experiments. [ABSTRACT FROM PUBLISHER]

The scale of mobile applications, as well as the connecting users is developing with a dramatical speed. In the meantime, a heavy capacity burden has been posed to the Internet Service Provider (ISP). As a promising countermeasure, congestion-dependent pricing mechanisms are thereby proposed. Nevertheless, when facing the threats of extreme traffic oscillation and the Distributed Denial of Service (DDoS) attacks, none of the previous pricing models works adequately. This letter presents DDoS-Resilient Data Pricing (DRDP), a novel congestion-aware pricing mechanism that provides accurate price announcement even under severe traffic fluctuation and economic resilience against link-flooding attacks. We employ border gateway protocol in the process of price dissemination, making DRDP a practical scheme to deploy. In the light of DRDP, both high ISP profits and customer satisfaction can be achieved at the same time. We further verify the effectiveness of DRDP with comprehensive network experiments. [ABSTRACT FROM PUBLISHER]