Full-key recovery on ML-KEM
100Full-Key RateSASCA attack pipeline
Evaluation Results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| SASCA attack pipelineSNR×N=3 × 10^3, n=102026.04 | 100 | 72.3 | 0.05 | 11.65 | 5.52 | 2.11 | |
| SASCA attack pipelineSNR×N=5 × 10^3, n=102026.04 | 100 | 72.3 | 0.06 | 11.64 | 5.89 | 1.98 | |
| SASCA attack pipelineSNR×N=10^4, n=102026.04 | 100 | 72.3 | 0 | 11.7 | 6.39 | 1.83 | |
| SASCA attack pipelineSNR×N=2 × 10^3, n=202026.04 | 90 | 69.9 | 0.27 | 11.43 | 5.23 | 2.19 | |
| SASCA attack pipelineSNR×N=2.5 × 10^3, n=202026.04 | 90 | 69.9 | 0.18 | 11.52 | 5.39 | 2.14 | |
| SASCA attack pipelineSNR×N=1.5 × 10^3, n=202026.04 | 85 | 64 | 0.51 | 11.19 | 5.02 | 2.23 | |
| SASCA attack pipelineSNR×N=10^3, n=202026.04 | 40 | 21.9 | 1.12 | 10.58 | 4.73 | 2.24 | |
| SASCA attack pipelineSNR×N=500, n=102026.04 | 30 | 10.8 | 2.46 | 9.24 | 4.23 | 2.19 |