SoK: how (not) to design and implement post-quantum cryptography
type: Item
instance of: scholarly article
title: SoK: how (not) to design and implement post-quantum cryptography
zbMATH Open document ID: 1479.94189
DOI: 10.1007/978-3-030-75539-3_19
author: James Howe
author: Thomas Prest
author: Daniel Apon
publication date: 2021-12-20T00:00:00Z
Mathematics Subject Classification ID: 94A60
Mathematics Subject Classification ID: 94A62
Mathematics Subject Classification ID: 81P94
zbMATH DE Number: 7449888
zbMATH Keywords: signatures
zbMATH Keywords: key-establishment schemes
MaRDI profile type: Publication
full work available at URL: 978-3-030-75539-3 19
OpenAlex ID: W3159391650
cites work: Q4228459
cites work: Q4526993
cites work: On the concrete hardness of learning with errors
cites work: Ciphers for MPC and FHE
cites work: Estimate all the {LWE, NTRU} schemes!
cites work: Security of hedged Fiat-Shamir signatures under fault attacks
cites work: Improving stateless hash-based signatures
cites work: An Improved Compression Technique for Signatures Based on Learning with Errors
cites work: Merkle's key agreement protocol is optimal: an \(O(n^2)\) attack on any key agreement from random oracles
cites work: Masking the GLP lattice-based signature scheme at any order
cites work: Concretely-Efficient Zero-Knowledge Arguments for Arithmetic Circuits and Their Application to Lattice-Based Cryptography
cites work: Banquet: short and fast signatures from AES
cites work: New directions in nearest neighbor searching with applications to lattice sieving
cites work: The Exact Security of Digital Signatures-How to Sign with RSA and Rabin
cites work: Post-Quantum Cryptography
cites work: SPHINCS: Practical Stateless Hash-Based Signatures
cites work: Practical implementation of Ring-SIS/LWE based signature and IBE
cites work: Solving polynomial systems over finite fields
cites work: Sigma protocols for MQ, PKP and SIS, and fishy signature schemes
cites work: LegRoast: Efficient Post-quantum Signatures from the Legendre PRF
cites work: CSI-FiSh: efficient isogeny based signatures through class group computations
cites work: Public key compression for constrained linear signature schemes
cites work: PKP-based signature scheme
cites work: Quantum security analysis of CSIDH
cites work: Assessing the feasibility of single trace power analysis of Frodo
cites work: Decoding linear codes with high error rate and its impact for LPN security
cites work: Flush, Gauss, and reload -- a cache attack on the BLISS lattice-based signature scheme
cites work: On the Security of the Winternitz One-Time Signature Scheme
cites work: Grafting trees: a fault attack against the SPHINCS framework
cites work: CSIDH: an efficient post-quantum commutative group action
cites work: Message-recovery laser fault injection attack on the \textit{classic McEliece} cryptosystem
cites work: Tight and optimal reductions for signatures based on average trapdoor preimage sampleable functions and applications to code-based signatures
cites work: An efficient quantum collision search algorithm and implications on symmetric cryptography
cites work: From 5-Pass $$\mathcal {MQ}$$-Based Identification to $$\mathcal {MQ}$$-Based Signatures
cites work: Approximate trapdoors for lattices and smaller hash-and-sign signatures
cites work: Small solutions to polynomial equations, and low exponent RSA vulnerabilities
cites work: Q4536804
cites work: Q4474171
cites work: Q3374924
cites work: LWE with side information: attacks and concrete security estimation
cites work: Q5752488
cites work: (One) failure is not an option: bootstrapping the search for failures in lattice-based encryption schemes
cites work: The impact of error dependencies on Ring/Mod-LWE/LWR based schemes
cites work: Decryption failure attacks on IND-CCA secure lattice-based schemes
cites work: SeaSign: compact isogeny signatures from class group actions
cites work: Towards practical key exchange from ordinary isogeny graphs
cites work: SQISign: compact post-quantum signatures from quaternions and isogenies
cites work: BBQ: using AES in Picnic signatures
cites work: Wave: a new family of trapdoor one-way preimage sampleable functions based on codes
cites work: Two attacks on rank metric code-based schemes: RankSign and an IBE scheme
cites work: On the Joint Security of Encryption and Signature in EMV
cites work: The XL-Algorithm and a Conjecture from Commutative Algebra
cites work: New directions in cryptography
cites work: Linear equivalence of block ciphers with partial non-linear layers: application to LowMC
cites work: Efficient Identity-Based Encryption over NTRU Lattices
cites work: Learning a Zonotope and More: Cryptanalysis of NTRUSign Countermeasures
cites work: A public key cryptosystem and a signature scheme based on discrete logarithms
cites work: Q4660688
cites work: A Distinguisher for High-Rate McEliece Cryptosystems
cites work: Towards quantum-resistant cryptosystems from supersingular elliptic curve isogenies
cites work: How To Prove Yourself: Practical Solutions to Identification and Signature Problems
cites work: Affine Masking against Higher-Order Side Channel Analysis

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: RankSign: An Efficient Signature Algorithm Based on the Rank Metric

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: On the Security of Supersingular Isogeny Cryptosystems

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Trapdoors for hard lattices and new cryptographic constructions

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q4474162

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q3775469

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q4364546

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q4228473

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Practical Lattice-Based Cryptography: A Signature Scheme for Embedded Systems

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A key-recovery timing attack on post-quantum primitives using the Fujisaki-Okamoto transformation and its application on FrodoKEM

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A Key Recovery Attack on MDPC with CCA Security Using Decoding Errors

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A novel CCA attack using decryption errors against LAC

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Limits on the efficiency of (ring) LWE-based non-interactive key exchange

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q4945380

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q2778851

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q3840170

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q4418531

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A modular analysis of the Fujisaki-Okamoto transformation

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: SoK: how (not) to design and implement post-quantum cryptography

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Benchmarking Post-quantum Cryptography in TLS

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Advances in Cryptology - CRYPTO 2003

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: W-OTS+ – Shorter Signatures for Hash-Based Signature Schemes

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q3549593

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Towards Quantum-Resistant Cryptosystems from Supersingular Elliptic Curve Isogenies

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Quantum cryptanalysis in the RAM model: claw-finding attacks on SIKE

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Implementing Grover oracles for quantum key search on AES and LowMC

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A crossbred algorithm for solving Boolean polynomial systems

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A Subexponential-Time Quantum Algorithm for the Dihedral Hidden Subgroup Problem

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Another Subexponential-time Quantum Algorithm for the Dihedral Hidden Subgroup Problem

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Finding shortest lattice vectors faster using quantum search

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Side channel information set decoding using iterative chunking. Plaintext recovery from the ``Classic McEliece'' hardware reference implementation

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Worst-case to average-case reductions for module lattices

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Fiat-Shamir with Aborts: Applications to Lattice and Factoring-Based Signatures

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: On Ideal Lattices and Learning with Errors over Rings

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Trapdoors for Lattices: Simpler, Tighter, Faster, Smaller

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Masking Dilithium. Efficient implementation and side-channel evaluation

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Learning a Parallelepiped: Cryptanalysis of GGH and NTRU Signatures

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Template Attacks on Masking—Resistance Is Futile

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Cold boot attacks on NTRU

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A decade of lattice cryptography

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: He gives C-sieves on the CSIDH

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: How (Not) to Instantiate Ring-LWE

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Lattice Cryptography for the Internet

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Algebraically structured LWE. Revisited

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Security Proofs for Signature Schemes

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: On lattices, learning with errors, random linear codes, and cryptography

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q4412971

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A method for obtaining digital signatures and public-key cryptosystems

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A Side-Channel Assisted Cryptanalytic Attack Against QcBits

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: On Provable Security of UOV and HFE Signature Schemes against Chosen-Message Attack

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Public-Key Identification Schemes Based on Multivariate Quadratic Polynomials

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A reaction attack against cryptosystems based on LRPC codes

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Breaking Ed25519 in WolfSSL

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Q3210171

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Lattice basis reduction: Improved practical algorithms and solving subset sum problems

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A new identification scheme based on syndrome decoding

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: A new paradigm for public key identification

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Advances in Cryptology - EUROCRYPT 2004

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Analysis of Information Set Decoding for a Sub-linear Error Weight

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Parallel collision search with cryptanalytic applications

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: Improved identification schemes based on error-correcting codes

SoK: how (not) to design and implement post-quantum cryptography (cites work)
cites work: All in the XL Family: Theory and Practice