François Gérard

High-order Table-based Conversion Algorithms and Masking Lattice-based Encryption

2022 · IACR Transactions on Cryptographic Hardware and Embedded Systems

Masking is the main countermeasure against side-channel attacks on embedded devices. For cryptographic algorithms that combine Boolean and arithmetic masking, one must therefore convert between the two types of masking, without leaking additional information to …