MITAKA: A Simpler, Parallelizable, Maskable Variant of FALCON - Université de Rennes Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

MITAKA: A Simpler, Parallelizable, Maskable Variant of FALCON

Thomas Espitau
  • Fonction : Auteur
  • PersonId : 1130924
François Gérard
  • Fonction : Auteur
  • PersonId : 1130925
Akira Takahashi
  • Fonction : Auteur
  • PersonId : 1130927
Mehdi Tibouchi
  • Fonction : Auteur
  • PersonId : 1124979
Yang Yu

Résumé

This work describes the MITAKA signature scheme: a new hash-and-sign signature scheme over NTRU lattices which can be seen as a variant of NIST finalist FALCON. It achieves comparable efficiency but is considerably simpler, online/offline, and easier to parallelize and protect against sidechannels, thus offering significant advantages from an implementation standpoint. It is also much more versatile in terms of parameter selection. We obtain this signature scheme by replacing the FFO lattice Gaussian sampler in FALCON by the "hybrid" sampler of Ducas and Prest, for which we carry out a detailed and corrected security analysis. In principle, such a change can result in a substantial security loss, but we show that this loss can be largely mitigated using new techniques in key generation that allow us to construct much higher quality lattice trapdoors for the hybrid sampler relatively cheaply. This new approach can also be instantiated on a wide variety of base fields, in contrast with FALCON's restriction to power-of-two cyclotomics. We also introduce a new lattice Gaussian sampler with the same quality and efficiency, but which is moreover compatible with the integral matrix Gram root technique of Ducas et al., allowing us to avoid floating point arithmetic. This makes it possible to realize the same signature scheme as MITAKA efficiently on platforms with poor support for floating point numbers. Finally, we describe a provably secure masking of MITAKA. More precisely, we introduce novel gadgets that allow provable masking at any order at much lower cost than previous masking techniques for Gaussian sampling-based signature schemes, for cheap and dependable side-channel protection.
Fichier principal
Vignette du fichier
main.pdf (811.55 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03618678 , version 1 (24-03-2022)
hal-03618678 , version 2 (10-05-2023)

Identifiants

  • HAL Id : hal-03618678 , version 2

Citer

Thomas Espitau, Pierre-Alain Fouque, François Gérard, Mélissa Rossi, Akira Takahashi, et al.. MITAKA: A Simpler, Parallelizable, Maskable Variant of FALCON. Eurocrypt 2022 - International Conference on the Theory and Applications of Cryptographic Techniques, May 2022, Trondheim, Norway. pp.1-50. ⟨hal-03618678v2⟩
95 Consultations
111 Téléchargements

Partager

Gmail Facebook X LinkedIn More