Olivier Bronchain

Less than a week to Real World Crypto in Toronto and we have a few more sponsors to thank: @TIIuae, @NXP, @ISARACorp, @NCCGroupplc, @Bloomberg, and @MITREcorp. See you all soon!

Pleased to announce that Dr Gaëtan Cassiers of the UCLouvain Crypto Group will give a keynote speech at Cosade'24 entitled "Composable masking schemes": cosade.org/cosade24/keyno…

22nd Smart Card Research and Advanced Application Conference (CARDIS) 2023 November 14-16, 2023 Venue: University of Amsterdam, Amsterdam, Netherlands Registration is now open! sbd-research.nl/cardis-2023/re…

New paper from our @NXP PQC team ! A new methodology for SCA and FA against Dilithium, scaling gently with noise ! We exploit many different variables during accepted as well as rejected signatures and attack shuffled implementations. Check it out: eprint.iacr.org/2023/1545

I have recently released a new hardware design of the Ascon cipher (github.com/rprimas/ascon-…). It is written in Verilog, is easy to work with, and comes with a very permissive CC0 license. Have fun 😉.

I am happy to share that our paper "From MLWE to RLWE: A Differential Fault Attack on Randomized & Deterministic Dilithium" will appear in TCHES23 Issue 4 co-authored by our @NXP PQC Innovation team. eprint.iacr.org/2023/1074

My former team and SIMPLE-Crypto are organizing the CHES23 CTF ! Go and break an hardware masked AES !

#ePrint Enabling FrodoKEM on Embedded Devices: JW Bos, O Bronchain, F Custers, J Renes, D Verbakel, C van Vredendaal ia.cr/2023/158

@mjos_crypto ASCON has also good properties against SCA at the mode level: eprint.iacr.org/2020/211.pdf Especially, the cost of SCA protection can get amortized for long messages

HW folks are happy not just because of area & energy savings but because Ascon can be masked as simply as SHA3 (typically with TI): Securing Ascon&SHA3 against DPA/DEMA physical side-channel attacks is much easier than algorithms that mix addition and XOR, like SHA2 or ChaCha.

Ascon was selected as the NIST LWC winner. For those unfamiliar with it: It is like a "one-fifth" Keccak (a 320-bit permutation with a very similar structure to Keccak's f-1600) in an AEAD mode. It's also about 1/5 of the hardware size all-round. groups.google.com/a/list.nist.go…

I release the code of my CHES 2023 paper about scheme-aware profiling attacks against masked implementations. The code 👉 github.com/uclcrypto/Sche… The paper 👉 tches.iacr.org/index.php/TCHE…

@ileanabuhan @CardisConf Enjoy the conference !

@CardisConf 5 trains, 10 hours, 4 countries and 2 reviews later made it to Birmingham University Looking forward to #Cardis22

🚴‍♀️ Ça a l'air de bien rouler pour Marcel 🤓 Pour sa santé, le camion a arrêté de fumer Bravo aux étudiants du Kot-à-jeux qui ont remporté le prix du plus beau vélo folklorique au #24hveloLLN de Louvain-La-Neuve (Belgique). Chauffe Marcel 🚲

New ePrint is out ! We discuss side-channel security of Dilithium, new masking gadgets, new sensitivity analysis and the impact of randomized and deterministic versions on SCA security. ia.cr/2022/1406

@gareth_t_davies @tiborja Welcome to the team !

I'm delighted to announce that I will soon be joining NXP in Leuven as a member of the crypto team led by Joppe Bos. A huge thank you to @tiborja and the rest of the ITSC Wuppertal team for a fun and productive few years!

@pqcschool2022 @hellman1908 Thanks ! Enjoy the week in budapest !

@BronchainO @hellman1908 Yeah, we'll put the slides of the presentations on our website whenever we receive them from the speakers (if at all).

👋Welcome to the Twitter page of the summer school on post-quantum cryptography 2022. Here are some helpful links where you can learn more about our school. 📖Programme pqcsummerschool2022.inf.elte.hu/index.php/prog… ✍️Lessons, lecture notes and exercises pqcsummerschool2022.inf.elte.hu/index.php/less…

@gloupin There is one about blockchains ! youtu.be/WcdN1fiRg1A

Now I just need to find one for isogenies...

My last UCLouvain paper "Bitslicing Arithmetic/Boolean Masking Conversions for Fun and Profit with Application to Lattice-Based KEMs" has been accepted to TCHES2022. See you in @IacRches, Leuven, for the talk. ia.cr/2022/158

With real pieces of scalib (poke @BronchainO ) that now efficiently supports modular operations in the factor graph for SASCA: github.com/simple-crypto/…

Due to many requests we decided to extend the submission deadline for CARDIS 2022. New deadline 4th of July!