Search papers, labs, and topics across Lattice.
This paper introduces a four-stage verification hierarchy combining structural dependency analysis and Single-Authentication Distance Checking (SADC) to enable scalable pre-silicon verification of masked post-quantum cryptographic accelerators. The approach efficiently identifies potential side-channel vulnerabilities in large designs, reducing the burden of manual review. Applied to a 1.17-million-cell ML-DSA/ML-KEM accelerator, the method narrowed manual review from hundreds of structural flags to 165 actionable candidates with mathematical certificates.
Forget weeks of manual review: this new verification pipeline slashes the effort needed to find side-channel vulnerabilities in post-quantum crypto hardware, delivering mathematical certificates for actionable candidates.
Post-quantum cryptographic accelerators require side-channel resistance evidence for FIPS 140-3 certification. However, exact masking-verification tools scale only to gadgets of a few thousand cells. We present a four-stage verification hierarchy, D0/D1 structural dependency analysis, fresh-mask refinement, Boolean Single-Authentication Distance Checking (SADC), and arithmetic SADC, that extends sound first-order masking verification to production arithmetic modules. Applied to the 1.17-million-cell Adams Bridge ML-DSA/ML-KEM accelerator, structural analysis completes in seconds across all 30 masked submodules. A multi-cycle extension (MC-D1) reclassifies 12 modules from structurally clean to structurally flagged. On the 5,543-cell ML-KEM Barrett reduction module, the pipeline machine-verifies 198 of 363 structurally flagged wires (54.5%) as first-order secure, reports 165 as candidate insecure for designer triage (a sound upper bound), and leaves 0 indeterminate. Every verdict is cross validated by Z3 and CVC5 with 0 disagreements across 363 wires. The result narrows manual review from hundreds of structural flags to 165 actionable candidates with mathematical certificates, enabling pre-silicon side-channel evidence generation on production ML-KEM hardware.
