CRII: SaTC: Secure Instruction Set Extensions for Lattice-Based Post-Quantum Cryptosystems

量子计算机的出现对现有的安全标准构成了严重的威胁，这激发了后量子密码学（PQC）的研究。各种PQC方案已被提出用于标准化，其数学合理性正在研究中。不幸的是，即使是数学上合理的加密方案也可能在实现级别受到攻击。该项目的主要研究目标是开发基于格的密码系统的安全实现，这是PQC加密建议的主要类别。这项工作专门针对可能泄露信息的物理实现的基本功率和电磁侧信道漏洞。本课题的智力优势在于提出了一种利用指令集扩展组成侧信道保护软件的新框架，能够提供全面的侧信道安全保护。相比之下，晶格密码系统的边信道分析研究迄今为止仅限于评估单个实例的点解。研究任务是提取一组基于格的密码系统的常用操作，构建这些算术计算的抗侧信道版本，使用侧信道感知编译器用受保护的指令重新组合软件，并评估/基准侧信道安全性和对策开销。该项目更广泛的影响包括传播出版物，分发开源硬件和软件，以及连接计算机体系结构和硬件安全的研究。这个桥是至关重要的，因为安全的计算机体系结构目前在其威胁模型中排除了物理侧信道。通过评估提交的基于点阵加密的提案，这项工作也可能有助于由美国国家标准与技术研究所（NIST）领导的正在进行的量子安全加密标准化工作。该项目将使用一个带有多个备份服务器的存储库来存储和记录数据，主要结果以及硬件和软件产品将通过使用万维网上的资源向公众提供。有关项目存储库的更多信息可访问https://research.ece.ncsu.edu/aaysu/research.html。在项目期间，存储库将被积极维护。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The emergence of quantum computers poses a serious threat for existing security standards, which motivates post-quantum cryptography (PQC) research. Various PQC schemes have been proposed for standardization, whose mathematical soundness are under investigation. Unfortunately, even a mathematically sound cryptography scheme may be attacked at the implementation level. The primary research goal of this project is to develop secure implementations for lattice-based cryptosystems, a major class of PQC encryption proposals. This work specifically addresses the fundamental power and electromagnetic side-channel vulnerabilities of physical implementations which may leak information. The intellectual merit of this project is a novel framework that employs instruction set extensions to compose side-channel protected software, which can provide comprehensive side-channel security. By contrast, research on side-channel analysis of lattice cryptosystems have so far been limited to point solutions that evaluate a single instance. The research tasks are to extract a set of common operations for lattice-based cryptosystems, to build side-channel resistant versions of these arithmetic computations, to use a side-channel aware compiler for re-composing the software with the protected instructions, and to evaluate/benchmark side-channel security and countermeasure overheads.The broader impacts of the project include disseminating publications, distributing open-source hardware and software, and bridging the research on computer architectures and hardware security. This bridge is critical as secure computer architectures currently exclude physical side-channels in their threat model. This work may also help the ongoing quantum-secure encryption standardization effort led by the National Institute of Standards and Technology (NIST), by evaluating the submitted lattice cryptography-based proposals. This project will use a repository with multiple back up servers to store and log the data, and the major results and hardware and software products will be made publicly available by using resources over the world wide web. Further information on the project repository will be made accessible at https://research.ece.ncsu.edu/aaysu/research.html. The repository is intended to be actively maintained for the duration of the project.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.