Full Key-Recovery Cubic-Time Template Attack on Classic McEliece Decapsulation - Université Jean-Monnet-Saint-Étienne
Article Dans Une Revue IACR Transactions on Cryptographic Hardware and Embedded Systems Année : 2024

Full Key-Recovery Cubic-Time Template Attack on Classic McEliece Decapsulation

Vlad Dragoi
Brice Colombier
Pierre-Louis Cayrel
Vincent Grosso

Résumé

Classic McEliece is one of the three code-based candidates in the fourth round of the NIST post-quantum cryptography standardization process in the Key Encapsulation Mechanism category. As such, its decapsulation algorithm is used to recover the session key associated with a ciphertext using the private key. In this article, we propose a new side-channel attack on the syndrome computation in the decapsulation algorithm that recovers the private key, which consists of the private Goppa polynomial g and the permuted support L. The attack relies on both practical aspects and theoretical contributions, namely that the side-channel distinguisher can accurately discriminate elements of the permuted support L, while relying only on a standard noisy Hamming weight leakage assumption and that there exists a cubic-time algorithm that uses this information to recover the private Goppa polynomial g. Compared with previous work targeting the Classic McEliece private key, this drastically improves both on the assumptions made in the attacker model and on the overall efficiency of the key-recovery algorithm. We have carried out the attack in practice on a microcontroller target running the reference implementation of Classic McEliece, and make the full attack source code available.
Fichier principal
Vignette du fichier
TCHES_25.pdf (930.47 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04835914 , version 1 (13-12-2024)

Licence

Identifiants

Citer

Vlad Dragoi, Brice Colombier, Nicolas Vallet, Pierre-Louis Cayrel, Vincent Grosso. Full Key-Recovery Cubic-Time Template Attack on Classic McEliece Decapsulation. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024, 2025 (1), pp.367-391. ⟨10.46586/tches.v2025.i1.367-391⟩. ⟨hal-04835914⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

More