SaTC: CORE: Medium: Collaborative: Countermeasures Against Side-Channels Attacks Targeting Hardware and Embedded System Implementations of Post-Quantum Cryptographic Algorithms

量子计算机被认为具有执行专门计算的潜力，超出了当今存在的任何超级计算机的范围，威胁到了当今的主要公钥密码学标准。后量子密码学(PQC)致力于设计和分析密码算法，这些算法可以抵抗任何使用量子计算机的已知攻击，但本身可以使用基于当前半导体技术的经典计算平台来实现。该项目旨在通过利用密码设备的功耗和/或影响其运行的故意瞬时故障来开发有效的方法来保护新兴的PQC方案的实现免受强大的旁路攻击。要研究的算法代表了几个主要的PQC家族和三大类公钥密码应用：加密、数字签名和密钥封装机制。该项目的目标是根据普遍接受的软件和硬件性能指标来确定针对电源和故障攻击的有效对策的成本。研究的重点是(I)研究针对故障攻击的对策对功率攻击弹性的影响，以及(Ii)提出实现故障和功率分析相结合的弹性的解决方案。该项目将涉及对初步开发的实验平台的几个重要扩展：用于侧通道分析的灵活开源工作台(FOBOS)。电源和故障攻击是PQC实际实施的真正威胁，并可能显著阻碍向新标准的成功过渡。该项目将对针对这些攻击的对策进行系统、长期的研究，这可能会使过渡到PQC更加安全，使世界各地的互联网用户受益。外展活动将包括在高中进行励志讲座，促进和监督本科生的研究，并为研究生组织一系列国际比赛。所获得的知识和经验将被整合到几个课程模块中，由所有研究人员共同开发并在线分享。预计在整个项目期间将开发多种算法、计算机辅助设计工具、软件程序和硬件设计。项目成果将提供给非营利部门的研究人员和教育工作者，如大学、研究机构和政府实验室。为了便于维护、传播和分发本项目的代码和数据，将由一台服务器专门保存所有可交付成果的草稿和最终副本。这台服务器将在整个项目期内以及之后的五年内进行维护。项目网站将在http://www.pqcSCA.com.This颁奖典礼上持续提供，这反映了国家科学基金会的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Quantum computers are believed to have a potential to perform specialized calculations beyond the reach of any supercomputer in existence today, threatening today's major public-key cryptography standards. Post-Quantum Cryptography (PQC) is devoted to the design and analysis of cryptographic algorithms that are resistant against any known attacks using quantum computers, but by themselves can be implemented using classical computing platforms, based on current semiconductor technologies. This project aims to develop effective methods of protecting the implementations of emerging PQC schemes against powerful side-channel attacks based on exploiting power consumption of cryptographic devices and/or intentional transient faults affecting their operation.The algorithms to be investigated represent several major PQC families and three major categories of public-key cryptography applications: encryption, digital signature, and key encapsulation mechanism. The goal of the project is to determine the cost of effective countermeasures against power and fault attacks in terms of the commonly accepted software and hardware performance metrics. The research thrusts will (i) investigate the effects of countermeasures against fault attacks on resiliency to power attacks, and (ii) propose solutions to achieve combined fault and power analysis resiliency. The project will involve several significant extensions to preliminarily-developed experimental platform: Flexible Open-source workBench fOr Side-channel analysis (FOBOS).Power and fault attacks are real threats to practical implementation of PQC and may significantly thwart the successful transition to new standards. This project will investigate systematic, long-term study of countermeasures against these attacks, which may make transition to PQC more secure, benefiting Internet users worldwide. The outreach activities will include motivational lectures at high schools, promoting and supervising undergraduate research, and organizing a series of international competitions for graduate students. The knowledge and experience gained will be integrated into several course modules, developed jointly by all investigators and shared on-line.It is expected that multiple algorithms, computer-aided design tools, software programs, and hardware designs will be developed throughout the project period. Project deliverables will be made available to researchers and educators in the non-profit sector, such as universities, research institutions, and government laboratories. To make it easy to maintain, disseminate, and distribute code and data from this project, a single server will be dedicated to keeping all the draft and final copies of the deliverables. This server will be maintained through the project period and additional five years beyond. The project website will be continuously available at http://www.pqcSCA.com.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.