Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This study investigates the side-channel vulnerabilities of FPGA-based implementations of the Fujisaki-Okamoto (FO) verification in post-quantum cryptography, particularly focusing on ML-KEM. By comparing unprotected, hash-based, and higher-order masked verification implementations on both microcontrollers and FPGAs, the authors reveal that while FPGAs provide speed advantages, they also exhibit greater susceptibility to side-channel attacks. The findings indicate that even higher-order masked designs can leak critical information, highlighting the ongoing challenges in securing PQC algorithms in hardware with performance constraints.
FPGA implementations of PQC ML-KEM verification can leak enough information for full secret-key recovery, even with higher-order masking.
As ML-KEM is adopted as a post-quantum cryptographic standard, resilience against physical side-channel attacks has become essential. Among the constituent steps, the decapsulation Fujisaki-Okamoto (FO) verification is particularly vulnerable to side-channel power and electromagnetic (EM) analysis. In this work, we focus on common FPGA-based implementations and examine their side-channel vulnerabilities, and compare them with those of microcontroller implementations. Three verification implementations, unprotected, hash-based (first-order), and higher-order masked, are evaluated for side-channel security on both a microcontroller and an FPGA. While FPGAs offer higher speed and parallelism, they often exhibit stronger side-channel leakage, especially in high bandwidth configurations. The higher-order masked designs still leak information about the underlying data due to hardware-level effects and data-dependent processing. Our experiments show that their parallelized processing on FPGAs introduces sufficient first-order leakage for full secret-key recovery. These results underscore the persistent challenge of securing PQC algorithms in performance-constrained and parallelized hardware environments.