A computational efficient masking friendly post-quantum signature scheme secure to side-channel-attack

加密签名方案对于软件产品/更新的安全和自动化分发是不可或缺的——提供源身份验证和数据完整性证明。然而，现有的方案是基于数学的，容易受到量子计算机的攻击。随着量子计算机成为商业现实，人们迫切需要量子安全签名。虽然第一代后量子（PQ）加密标准正在出现，但这些标准没有考虑更广泛的安全威胁，并且容易受到侧信道攻击（SCA）的攻击，即通过监控执行参数推断私有数据。虽然掩蔽对策可以追溯应用，但这些都是计算密集型的，导致开销随着掩蔽顺序呈指数增长。采用创新的子程序构建块设计，既不需要屏蔽，也可以在准线性时间内屏蔽，**浣熊是** **世界上第一个PQ签名方案，可将抗SCA的计算效率提高10倍**。浣熊**消除了在效率和安全之间妥协的需要**，并且适用于资源受限的平台，例如移动/物联网设备。

Cryptographic signature schemes are integral to secure and automated distribution of software products/updates -- providing source authentication and proof-of-data integrity. However, existing schemes are based on mathematics vulnerable to quantum computer attack. With quantum computers now becoming a commercial reality, there is an **urgent need for quantum-secure signatures**.Whilst a first-generation of post-quantum (PQ) cryptography standards are emerging, these do not consider broader security threats and are vulnerable to side-channel-attack (SCA) -- whereby private data is inferred by monitoring executional parameters. Although masking countermeasures can be retrospectively applied, these are computationally intensive, resulting in an exponential increase in overhead with masking order.Designed using innovative subroutine building blocks that either don't require masking, or can be masked in quasi-linear time, **Raccoon is** **a world's first PQ signature scheme delivering a computationally efficient 10-fold increase in resistance to SCA**.Raccoon **eliminates the need to compromise between efficiency and security**, and is viable for resource constrained platforms, such as mobile/IoT devices.