2 Secure Implementation of Lattice-Based Encryption Schemes
43
20
40
60
80
100
Number of measurements x 10
3
Number of measurements x 10
3
Number of measurements x 10 3
Number of measurements x 10 3
Number of measurements x 10
3
Number of measurements x 10
3
Number of measurements x 10
3
Number of measurements x 10
3
3
4
5
6
7
t
20
a
b
c
d
e
f
g
h
40
60
80
100
3
4
5
6
7
t
0 10 20 30 40 50 60 70 80 90 100
0 10 20 30 40 50 60 70 80 90 100
2.5
3
3.5
4
4.5
5
5.5
t
2.5
3
3.5
4
4.5
5
5.5
t
20
40
60
80
100
3
4
5
6
7
t
10 20 30 40 50 60 70 80 90 100
2.5
3
3.5
4
4.5
5
5.5
6
6.5
7
7.5
t
10 20 30 40 50 60 70 80 90 100
2.5
3
3.5
4
4.5
5
5.5
6
6.5
7
7.5
t
20
40
60
80
100
3
4
5
6
7
t
Fig. 2.4 Absolute maximum t-values for different modules of our masking scheme. The solid
blue line marks the first-order t-values and the dashed red line marks the second-order t-values.
(a) Butterfly. (b) Encryption. (c) Modulus transformation. (d) Final decoding operations. (e) Pointwise multiplication and addition. (f) Comparison. (g) Sampling. (h) Hash function