The Insecurity of Masked Comparisons: SCAs on ML-KEM’s FO-Transform

ePrint Report: The Insecurity of Masked Comparisons: SCAs on ML-KEM’s FO-Transform

Julius Hermelink, Kai-Chun Ning, Emanuele Strieder

NIST has released the draft standard for ML-KEM, and ML-KEM is actively used in several widely-distributed applications. Thus, the wide-spread use of ML-KEM in the embedded worlds has to be expected in the near future. This makes security against side-channel attacks a pressing matter.


Several side-channel attacks have previously been proposed, and one line of research have been attacks against the comparison step …

applications comparisons distributed draft embedded eprint report insecurity near nist report standard transform