Section: New Results

Masking the GLP Lattice-Based Signature Scheme at Any Order

Participants : Benjamin Grégoire, Gilles Barthe [IMDEA] , Sonia Belaïd [CryptoExpert] , Thomas Espitau [UPMC Paris 6] , Pierre-Alain Fouque [Université Rennes 1] , Mélissa Rossi [ENS Paris] , Mehdi Tibouchi [NTT] .

Recently, numerous physical attacks have been demonstrated against lattice based schemes, often exploiting their unique properties such as the reliance on Gaussian distributions, rejection sampling and FFT-based polynomial multiplication. In this work, we describe the first masked implementation of a lattice-based signature scheme. Since masking Gaussian sampling and other procedures involving contrived probability distribution would be prohibitively inefficient, we focus on the GLP scheme. This work is described in [13].