The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
Differential Fault Attacks on TFHE-Friendly Cipher FRAST
- Published
- Record updated
Summary
This paper presents differential fault attacks (DFAs) on FRAST, a stream cipher tailored for Torus-based Fully Homomorphic Encryption (TFHE). Exploiting FRAST's unbalanced Feistel structure, the authors recover the key in one second with 4 or 6 faults under precise fault injection, and in a few minutes under a more practical fault model without extra faults. They describe it as the first fault-type analysis of FRAST.
Mitigation
The authors recommend removing the negacyclic restriction in the penultimate round of FRAST and introducing non-zero linear structures into the S-boxes of the last two rounds.