{"id":41,"date":"2020-07-21T22:13:00","date_gmt":"2020-07-21T20:13:00","guid":{"rendered":"https:\/\/melissarossi.fr\/?page_id=41"},"modified":"2026-02-13T10:21:47","modified_gmt":"2026-02-13T10:21:47","slug":"research","status":"publish","type":"page","link":"https:\/\/www.melissarossi.fr\/index.php\/research\/","title":{"rendered":""},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Publications <\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Learning with Errors with Output Dependencies: LWE, LWR, and Physical Learning Problems under the Same Umbrella<\/strong><br>with Cl\u00e9ment Hoffmann, Pierrick M\u00e9aux and Fran\u00e7ois-Xavier Standaert<br>In the proceedings of PQ-CRYPTO 2026 <a href=\"https:\/\/eprint.iacr.org\/2025\/2225\">[eprint]<\/a><\/li>\n\n\n\n<li><strong>ML-DSA masking sweetened with SUCRE: shuffle-and-unmask countermeasure for rejection sampling<\/strong><br>with Sonia Bela\u00efd, Ryad Benadjila, Julien Devevey, Morgane Guerreau, Thomas Legavre, Ange Martinelli, Thomas Ricosset and Matthieu Rivain<br>In the proceedings of TCHES 2026<\/li>\n\n\n\n<li><strong>New Techniques for Random Probing Security and Application to Raccoon Signature Scheme<\/strong><br>with Sonia Bela\u00efd and Matthieu Rivain<br>In the proceedings of EUROCRYPT 2025 <a href=\"https:\/\/eprint.iacr.org\/2025\/278\">[eprint]<\/a><a href=\"https:\/\/github.com\/CryptoExperts\/EC25-random-probing-Raccoon\" data-type=\"URL\">[Github]<\/a><\/li>\n\n\n\n<li><strong>A Not So Discrete Sampler: Power Analysis Attacks on HAWK signature scheme<\/strong><br>with Morgane Guerreau<br>In the proceedings of TCHES 2024 <a href=\"https:\/\/eprint.iacr.org\/2024\/1248\" data-type=\"URL\">[eprint]<\/a><\/li>\n\n\n\n<li><strong>Raccoon: A Masking-Friendly Signature Proven in the Probing Model<\/strong><br>with Rafa\u00ebl del Pino, Shuichi Katsumata and Thomas Prest<br>In the proceedings of CRYPTO 2024 <a href=\"https:\/\/eprint.iacr.org\/2024\/1291\" data-type=\"URL\">[eprint]<\/a><\/li>\n\n\n\n<li><strong>A provably masked implementation of BIKE Key Encapsulation Mechanism<\/strong><br>with Lo\u00efc Demange.<br>In the 2024th edition of the journal Communications in Cryptology (CiC) Volume 1, Issue 1 <a href=\"https:\/\/eprint.iacr.org\/2024\/076\" data-type=\"URL\">[eprint]<\/a><a href=\"https:\/\/github.com\/loicdemange\/masked_BIKE_code\">[Github]<\/a><\/li>\n\n\n\n<li>I co-authored the <a href=\"https:\/\/raccoonfamily.org\/\">Raccoon<\/a> NIST on-ramp signature submission. More info on our dedicated website.<\/li>\n\n\n\n<li><strong>Mask Compression: High-Order Masking on Memory-Constrained Devices<\/strong><br>with Markku-Juhani O. Saarinen.<br>In the proceedings of Selected Areas in Cryptography (SAC) 2023<a href=\"https:\/\/eprint.iacr.org\/2023\/1117\" data-type=\"URL\"> [eprint]<\/a><\/li>\n\n\n\n<li><strong>Constant Input Attribute Based (and Predicate) Encryption from Evasive and Tensor LWE<\/strong><br>with Shweta Agrawal, Shota Yamada and Anshu Yadav<br>In the proceedings of CRYPTO 2023 <a href=\"https:\/\/eprint.iacr.org\/2023\/941\">[eprint]<\/a><\/li>\n\n\n\n<li><strong>GeT a CAKE: Generic Transformations from Key Encaspulation Mechanisms to Password Authenticated Key Exchanges<\/strong><br>with Hugo Beguinet, C\u00e9line Chevalier,  David Pointcheval and Thomas Ricosset.<br>In the proceedings of ACNS 2023 <a href=\"https:\/\/eprint.iacr.org\/2023\/470\">[eprint]<\/a><\/li>\n\n\n\n<li><strong>High-Order Masking of Lattice Signatures in Quasilinear Time<\/strong><br>with Rafa\u00ebl del Pino, Thomas Prest and Markku-Juhani O. Saarinen.<br>In the proceedings of Security &amp; Privacy (S&amp;P) 2023<\/li>\n\n\n\n<li><strong>On the Algebraic Immunity &#8211; Resiliency trade-off, implications for Goldreich\u2019s Pseudorandom Generator<\/strong><br>with Aur\u00e9lien Dupin and Pierrick M\u00e9aux.<br>In the 2023rd edition of Design Codes and Cryptography (DCC) journal <a href=\"https:\/\/eprint.iacr.org\/2021\/649\">[eprint] <\/a><a href=\"https:\/\/github.com\/88abaa99\/DahuHunting\">[Github]<\/a><\/li>\n\n\n\n<li><strong>The Hidden Parallelepiped Is Back Again: Power Analysis Attacks on Falcon<\/strong>.<br>with Morgane Guerreau, Ange Martinelli and Thomas Ricosset.<br>In the proceedings of TCHES 2022  <a href=\"https:\/\/eprint.iacr.org\/2022\/057\">[eprint] <\/a><a href=\"https:\/\/github.com\/mguerrea\/FalconPowerAnalysis\">[GitHub]<\/a><\/li>\n\n\n\n<li><strong>Mitaka: a simpler, parallelizable, maskable variant of Falcon.<\/strong><br>with Thomas Espitau, Pierre-Alain Fouque, Fran\u00e7ois G\u00e9rard, Akira Takahashi, Mehdi Tibouchi, Alexandre Wallet and Yang Yu.<br>In the proceedings of EUROCRYPT 2022 <a href=\"https:\/\/eprint.iacr.org\/2021\/1486\">[eprint] <\/a><a href=\"https:\/\/github.com\/espitau\/Mitaka-EC22\">[GitHub]<\/a><\/li>\n\n\n\n<li><strong>LWE with Side Information: Attacks and Concrete Security Estimation.<\/strong> <br>with Dana Dachman-Soled, L\u00e9o Ducas and Huijing Gong.<br>In the proceedings of CRYPTO 2020 <a href=\"https:\/\/eprint.iacr.org\/2020\/292\">[eprint] <\/a><a href=\"https:\/\/github.com\/lducas\/leaky-LWE-Estimator\">[GitHub]<\/a><\/li>\n\n\n\n<li><strong>(One) failure is not an option: Bootstrapping the search for failures in lattice-based encryption schemes.<\/strong><br>with Jan-Pieter D&#8217;Anvers and Fernando Virdia.<br>In the proceedings of EUROCRYPT 2020 <a href=\"https:\/\/eprint.iacr.org\/2019\/1399.pdf\">[eprint]<\/a><\/li>\n\n\n\n<li><strong>Isochronous Gaussian Sampling: From Inception to Implementation.<\/strong><br>with James Howe and Thomas Prest and Thomas Ricosset.<br>In the proceedings of PQ-Crypto 2020 <a href=\"https:\/\/eprint.iacr.org\/2019\/1411.pdf\">[eprint] <\/a><a href=\"https:\/\/github.com\/PQShield\/SAGA\">[GitHub]<\/a><\/li>\n\n\n\n<li><strong>GALACTICS: Gaussian Sampling for Lattice-Based Constant-Time Implementation of Cryptographic Signatures, Revisited.<\/strong><br>with Gilles Barthe, Sonia Bela\u00efd, Thomas Espitau, Pierre-Alain Fouque and Mehdi Tibouchi.<br>In the proceedings of ACM-CCS 2019 <a href=\"https:\/\/eprint.iacr.org\/2019\/511.pdf\">[eprint]<\/a> <a href=\"https:\/\/github.com\/espitau\/GALACTICS\">[GitHub]<\/a><\/li>\n\n\n\n<li><strong>An Efficient and Provable Masked Implementation of qTESLA.<\/strong><br>with Fran\u00e7ois G\u00e9rard.<br>In the proceedings of CARDIS 2019 <a href=\"https:\/\/eprint.iacr.org\/2019\/606.pdf\">[eprint]<\/a> <a href=\"https:\/\/github.com\/fragerar\/Masked_qTESLA\">[GitHub]<\/a><\/li>\n\n\n\n<li><strong>Assessment of the Key-Reuse Resilience of NewHope.<\/strong><br>with Aur\u00e9lie Bauer, Henri Gilbert and Gu\u00e9na\u00ebl Renault.<br>In the proceedings of CT-RSA 2019 <a href=\"https:\/\/eprint.iacr.org\/2019\/075\">[eprint]<\/a> <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/keyreuseresilience.pdf\">[pdf]<\/a> <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/Attack_NH.mag.zip\">[code]<\/a><\/li>\n\n\n\n<li><strong>On the Concrete Security of Goldreich\u2019s Pseudorandom Generator.<\/strong><br>with Geoffroy Couteau, Aur\u00e9lien Dupin, Pierrick M\u00e9aux and Yann Rotella.<br>In the proceedings of ASIACRYPT 2018 <a href=\"https:\/\/eprint.iacr.org\/2018\/1162\">[eprint] <\/a><a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/prg_goldreich.pdf\">[pdf]<\/a><a href=\"https:\/\/github.com\/LuMopY\/SecurityGoldreichPRG\"> [code]<\/a><\/li>\n\n\n\n<li><strong>Masking the GLP Lattice-Based Signature Scheme at Any Order.<\/strong><br>with Gilles Barthe, Sonia Bela\u00efd, Thomas Espitau, Pierre-Alain Fouque, Benjamin Gr\u00e9goire and Mehdi Tibouchi.<br>In the proceedings of EUROCRYPT 2018 <a href=\"http:\/\/risq.fr\/blog-lattice-based.html\">[blog post] <\/a><a href=\"https:\/\/eprint.iacr.org\/2018\/381\">[eprint] <\/a><a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/glp.pdf\">[pdf]<\/a><a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/maskedglyph.zip\"> [code]<\/a><br>Also in the 2024th edition of Journal of Cryptology, Volume&nbsp;37, article 5 <\/li>\n\n\n\n<li><strong>A side channel assisted cryptanalytic attack against QcBits.<\/strong><br>with Mike Hamburg, Michael Hutter and Mark E. Marson.<br>In the proceedings of CHES 2017 <a href=\"https:\/\/eprint.iacr.org\/2017\/596\">[eprint]<\/a> <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/qcbits.pdf\">[pdf]<\/a> <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/attack_qcbits.sage.zip\">[code]<\/a><br><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Program Committees<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PKC 2020, TCHES 2022, TCHES 2023, ITW 2023, ACNS 2023, CRYPTO 2023, Journ\u00e9es C2 2023, TCHES 2024, EUROCRYPT 2024, PQ-CRYPTO 2024, CASCADE 2025 (second issue), PQ-CRYPTO 2025, CiC 2025, CASCADE 2026, TCHES 2026, CiC 2026, PQ-CRYPTO 2026, CRYPTO 2026, MAGICS 2026.<br>[My annual review limit for 2026 has been reached, and I will only be able to accept reviews for 2027.]<br><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conference Talks<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>New Techniques for Random Probing Security and Application to Raccoon Signature Scheme<\/strong>.<br>Eurocrypt 2025, Madrid, May 5th 2025 <a href=\"https:\/\/iacr.org\/submit\/files\/slides\/2025\/eurocrypt\/eurocrypt2025\/542\/542_slides.pdf\">[Slides]<\/a><\/li>\n\n\n\n<li><strong>The relevance and challenges of random probing security for post-quantum algorithms. Application to Raccoon signature scheme<\/strong>.<br>Wrach 2025, Roscoff, April 23rd 2025 <a href=\"https:\/\/wrach2025.conf.lip6.fr\/rossi_wrach25.pdf\">[Slides]<\/a><br>Journ\u00e9es Nationales 2025 du GDR S\u00e9curit\u00e9 Informatique, Caen, June 24th 2025 <a href=\"https:\/\/www.melissarossi.fr\/wp-content\/uploads\/2025\/06\/prez_journees_du_GDR.pdf\">[Slides]<\/a><\/li>\n\n\n\n<li><strong>Raccoon Signature Scheme<\/strong><br>LIRMM Cryptography Seminar (and other seminars), Montpellier, December 18th 2024<\/li>\n\n\n\n<li><strong>Not so discrete samplers: side-channel assisted attacks on lattice-based signature schemes<\/strong><br>IHP Post-quantum algebraic cryptography workshop, Paris, November 6th 2024<\/li>\n\n\n\n<li><strong>PQC Transition in France (update) &#8211; ANSSI Views<\/strong><br>Presented in RWPQC 2023 (and other seminars), Tokyo, March 26th 2023 <a href=\"https:\/\/www.melissarossi.fr\/wp-content\/uploads\/2023\/04\/ANSSIs-recommendations-on-the-migration-plan.pdf\">[Slides]<\/a><\/li>\n\n\n\n<li><strong>Side-channel countermeasures for lattice-based cryptography<\/strong><br>VeriSiCC Seminar, Paris, Sept 22nd 2022<\/li>\n\n\n\n<li>(In French) <strong>S\u00e9curit\u00e9 \u00e9tendue de la cryptographie fond\u00e9e sur les r\u00e9seaux euclidiens: tour d\u2019horizon des techniques d\u2019attaque et de protection<\/strong> <a href=\"https:\/\/www.melissarossi.fr\/wp-content\/uploads\/2022\/04\/journees_c2_sans_animations.pdf\">[Slides]<\/a><br>Journ\u00e9es C2, Hendaye, April 13th 2022<\/li>\n\n\n\n<li><strong>PQC Transition in France &#8211; ANSSI Views<\/strong><br>Presented in PQ-CRYPTO 2021 and other seminars <a href=\"http:\/\/pqcrypto2021.kr\/download\/program\/PQC_transition_in_France.pdf\">[Slides]<\/a><\/li>\n\n\n\n<li><strong>Assessing residual security of lattice-based cryptography<\/strong><br>CRISIS 2020, November 3rd<\/li>\n\n\n\n<li><strong><strong>Isochronous Gaussian Sampling: From Inception to Implementation.<\/strong><\/strong><br>PQCrypto, 2020, September 22nd, pre-recorded video for the remote conference (due to the Covid19 situation) <a href=\"https:\/\/www.youtube.com\/watch?v=KqCnJApHC3w&amp;feature=youtu.be\">[Youtube]<\/a><\/li>\n\n\n\n<li><strong>LWE with Side Information: Attacks and Concrete Security Estimation.<\/strong><br>Crypto, 2020, August 17th, pre-recorded video for the remote conference (due to the Covid19 situation) <a href=\"https:\/\/www.youtube.com\/watch?v=wCaLcbWnwDI\">[Youtube]<\/a><\/li>\n\n\n\n<li><strong>(One) failure is not an option: Bootstrapping the search for failures in lattice-based encryption schemes.<\/strong><br>Eurocrypt, 2020 May 15th, pre-recorded video for the remote conference (due to the Covid19 situation) <a href=\"https:\/\/www.youtube.com\/watch?v=5zg2N82LpRs&amp;t=1s\">[Youtube]<\/a><\/li>\n\n\n\n<li><strong>Isochrony techniques for lattice-based signatures.<\/strong><br>RISQ workshop, 2020 March 24th, presented remotely (due to the Covid19 situation) <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/RISQ_workshop.pdf\">[slides]<\/a><\/li>\n\n\n\n<li><strong>Simple, Fast and Constant-Time Gaussian Sampling over the Integers for FALCON.<\/strong><br>NIST PQC workshop, 2019 August 23rd, Santa Barbara, USA <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/slides-nist-workshop.pdf\">[slides]<\/a><\/li>\n\n\n\n<li><strong>Assessment of the Key-Reuse Resilience of NewHope.<\/strong><br>RSA Conference, 2019 March, San Francisco, USA <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/RSAslides.pdf\">[slides]<\/a><\/li>\n\n\n\n<li><strong>On the Concrete Security of Goldreich\u2019s Pseudorandom Generator.<\/strong><br>ASIACRYPT, 2018 December 4th, Brisbane, Australia <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/slides_PRG.pdf\">[slides]<\/a><\/li>\n\n\n\n<li><strong>Masking the GLP Lattice-Based Signature Scheme at Any Order.<\/strong><br>EUROCRYPT, 2018 May 1st, Tel Aviv, Israel <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/slidesGLP.pdf\">[slides]<\/a> <a href=\"https:\/\/www.youtube.com\/watch?v=4Cnqk6QEffY\">[Youtube]<\/a><\/li>\n\n\n\n<li><strong>Masking Lattice-based Fiat-Shamir-with-aborts Signatures at Any Order.<\/strong><br>CryptoAction Symposium, 2018 April 5th, Sutomore, Montenegro<\/li>\n\n\n\n<li><strong>A side channel assisted cryptanalytic attack against QcBits.<\/strong><br>CHES, 2017 September 26th, Taipei, Taiwan <a href=\"https:\/\/www.di.ens.fr\/~mrossi\/docs\/slidesches2017.pdf\">[slides] <\/a><a href=\"https:\/\/www.youtube.com\/watch?v=nETIMBzQ62c&amp;t=1627s\">[Youtube]<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><\/h2>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity is-style-wide\"\/>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"883\" height=\"1024\" src=\"https:\/\/www.melissarossi.fr\/wp-content\/uploads\/2020\/07\/lost-1-883x1024.png\" alt=\"\" class=\"wp-image-132\" style=\"width:380px;height:441px\"\/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Publications Program Committees PKC 2020, TCHES 2022, TCHES 2023, ITW 2023, ACNS 2023, CRYPTO 2023, Journ\u00e9es C2 2023, TCHES 2024, EUROCRYPT 2024, PQ-CRYPTO 2024, CASCADE 2025 (second issue), PQ-CRYPTO 2025, CiC 2025, CASCADE 2026, TCHES 2026, CiC 2026, PQ-CRYPTO 2026, CRYPTO 2026, MAGICS 2026.[My annual review limit for 2026 has been reached, and I will&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-41","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/pages\/41","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/comments?post=41"}],"version-history":[{"count":48,"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/pages\/41\/revisions"}],"predecessor-version":[{"id":424,"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/pages\/41\/revisions\/424"}],"wp:attachment":[{"href":"https:\/\/www.melissarossi.fr\/index.php\/wp-json\/wp\/v2\/media?parent=41"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}