CRII: SaTC: Secure Instruction Set Extensions for Lattice-Based Post-Quantum Cryptosystems

量子计算机的出现对现有的安全标准构成了严重威胁，这激发了后量子密码学（PQC）的研究。各种PQC计划已被提出标准化，其数学的合理性正在调查中。不幸的是，即使是数学上合理的加密方案也可能在实现级别受到攻击。这个项目的主要研究目标是为基于格的密码系统开发安全的实现，这是PQC加密建议的主要类别。这项工作专门解决了可能泄漏信息的物理实现的基本功率和电磁侧信道漏洞。该项目的智力价值是一个新的框架，采用指令集扩展组成侧通道保护软件，它可以提供全面的侧通道安全。 相比之下，对格密码系统的侧信道分析的研究迄今为止仅限于评估单个实例的点解。研究任务是为基于格的密码系统提取一组常见的操作，构建这些算术计算的侧通道抵抗版本，使用侧通道感知编译器重新组合具有受保护指令的软件，并评估/基准侧通道安全和对策开销。该项目的更广泛影响包括传播出版物，分发开源硬件和软件，并在计算机体系结构和硬件安全研究之间架起了一座桥梁。这座桥梁至关重要，因为安全的计算机架构目前在其威胁模型中排除了物理侧通道。这项工作也可能有助于正在进行的量子安全加密标准化工作，由美国国家标准与技术研究所（NIST）领导，通过评估提交的基于格加密的建议。该项目将使用一个有多个备份服务器的储存库来储存和记录数据，主要成果以及硬件和软件产品将通过使用万维网上的资源公开提供。关于项目资料库的进一步信息可在https://research.ece.ncsu.edu/aaysu/research.html上查阅。这个奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The emergence of quantum computers poses a serious threat for existing security standards, which motivates post-quantum cryptography (PQC) research. Various PQC schemes have been proposed for standardization, whose mathematical soundness are under investigation. Unfortunately, even a mathematically sound cryptography scheme may be attacked at the implementation level. The primary research goal of this project is to develop secure implementations for lattice-based cryptosystems, a major class of PQC encryption proposals. This work specifically addresses the fundamental power and electromagnetic side-channel vulnerabilities of physical implementations which may leak information. The intellectual merit of this project is a novel framework that employs instruction set extensions to compose side-channel protected software, which can provide comprehensive side-channel security. By contrast, research on side-channel analysis of lattice cryptosystems have so far been limited to point solutions that evaluate a single instance. The research tasks are to extract a set of common operations for lattice-based cryptosystems, to build side-channel resistant versions of these arithmetic computations, to use a side-channel aware compiler for re-composing the software with the protected instructions, and to evaluate/benchmark side-channel security and countermeasure overheads.The broader impacts of the project include disseminating publications, distributing open-source hardware and software, and bridging the research on computer architectures and hardware security. This bridge is critical as secure computer architectures currently exclude physical side-channels in their threat model. This work may also help the ongoing quantum-secure encryption standardization effort led by the National Institute of Standards and Technology (NIST), by evaluating the submitted lattice cryptography-based proposals. This project will use a repository with multiple back up servers to store and log the data, and the major results and hardware and software products will be made publicly available by using resources over the world wide web. Further information on the project repository will be made accessible at https://research.ece.ncsu.edu/aaysu/research.html. The repository is intended to be actively maintained for the duration of the project.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.