
The Lattice Isomorphism Problem with Hints
This IACR ePrint paper (published TCHES 2027) presents a new cryptanalysis technique for the Lattice Isomorphism Problem that embeds LIP into a shortest-vector-problem instance on a different lattice than the one used in Hawk's specification, allowing attackers to integrate "hints" — partial information on the secret key obtained via side-channel attacks or other leakage. Using the LeakyLWEEstimator tool, the authors show Hawk signatures themselves leak exploitable information about the secret key, eroding Hawk-1024's security by roughly 11 bits, and apply the framework to resolve an open side-channel problem from TCHES 2024 plus discuss further fault-injection attack paths. Hawk is a lattice-based signature scheme submitted to NIST's second post-quantum signature call, making this a concrete key-recovery cryptanalysis relevant to PQC migration planning.
Organisations named here
- Lattice Isomorphism Problem
- Mélissa Rossi
- Shortest Vector Problem
Technologies named here
- LeakyLWEEstimator
- Hawk
Techniques named here
- Cryptanalysis of the Lattice Isomorphism Problem with hints
- Hint conversion technique
- Side-channel attack
- Fault-injection attack paths
Related in Hardware & RF

HAETAE on a Diet: Less Stack, Less Time on Low-End Microcontrollers
geo-tp/ESP32-Bit-Pirate
