BEGIN:VCALENDAR
PRODID:-//DiS Inc.//Colloquium 2.0//EN
VERSION:2.0
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Colloquia of Digital Security
X-WR-TIMEZONE:Europe/Amsterdam
BEGIN:VTIMEZONE
TZID:Europe/Amsterdam
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU
DTSTART:19810329T020000
TZNAME:CEST
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU
DTSTART:19961027T030000
TZNAME:CET
TZOFFSETTO:+0100
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
UID:665@ds.cs.ru.nl
ORGANIZER;CN=DiS Colloquium:MAILTO:mmarhuenda@cs.ru.nl
DTSTART;TZID=Europe/Amsterdam:20260708T123000
DTEND;TZID=Europe/Amsterdam:20260708T131500
DTSTAMP:20260706T000000
SUMMARY: DiS Lunch by  Denis Nabokov
DESCRIPTION: Single-Trace Key Recovery Attacks on HQC Using Valid and Invalid Ciphertexts.  As the Hamming Quasi-Cyclic (HQC) cryptosystem was recently selected by NIST for standardization, a thorough evaluation of its implementation security is critical before its widespread deployment. This paper presents single-trace side-channel attacks that recover the full long-term secret key of HQC, experimentally evaluated on a protected Cortex-M4 implementation. We introduce two distinct attacks that significantly advance the state of the art: a passive attack that uniquely models key recovery as a moderate-density parity-check (MDPC) decoding problem from a single valid ciphertext, and an active chosen-ciphertext attack employing a new probing strategy on a linear combination of secret key components for significantly improved efficiency. Both attacks are enabled by a new information set decoding (ISD) variant that exploits soft side-channel information, a contribution of broader importance to code-based cryptography. Our experiments show that a single trace suffices for full key recovery under realistic conditions, effectively defeating countermeasures such as codeword masking for the first time. We also show that several existing defenses are ineffective against the new attacks.

LOCATION:the big lecture room in Mercator 1 (MERC1_00.28, ground floor)
STATUS:CONFIRMED
END:VEVENT
END:VCALENDAR