Communication Dans Un Congrès Année : 2024

HAETAE: Shorter Lattice-Based Fiat-Shamir Signatures

HAETAE: Signatures Fiat-Shamir fondées sur les Réseaux plus courtes

Résumé

We present HAETAE (Hyperball bimodAl modulE rejecTion signAture schemE), a new lattice-based signature scheme. Like the NIST-selected Dilithium signature scheme, HAETAE is based on the Fiat-Shamir with Aborts paradigm, but our design choices target an improved complexity/compactness compromise that is highly relevant for many space-limited application scenarios. We primarily focus on reducing signature and verification key sizes so that signatures fit into one TCP or UDP datagram while preserving a high level of security against a variety of attacks. As a result, our scheme has signature and verification key sizes up to 39% and 25% smaller, respectively, compared than Dilithium. We provide a portable, constanttime reference implementation together with an optimized implementation using AVX2 instructions and an implementation with reduced stack size for the Cortex-M4. Moreover, we describe how to efficiently protect HAETAE against implementation attacks such as side-channel analysis, making it an attractive candidate for use in IoT and other embedded systems.
Fichier principal
Vignette du fichier
2023-624.pdf (953.27 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04909666 , version 1 (24-01-2025)

Licence

Identifiants

Citer

Jung Hee Cheon, Hyeongmin Choe, Julien Devevey, Tim Güneysu, Dongyeon Hong, et al.. HAETAE: Shorter Lattice-Based Fiat-Shamir Signatures. Conference on Cryptographic Hardware and Embedded Systems - CHES2024, Sep 2024, Halifax, Canada. pp.25-75, ⟨10.46586/tches.v2024.i3.25-75⟩. ⟨hal-04909666⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

More