Two Birds, One Mask: Side-Channel-Resistant Unified Hardware for ML-DSA and ML-KEM (source code and datasets)

Two Birds, One Mask: Side-Channel-Resistant Unified Hardware for ML-DSA and ML-KEM

Source code

Released for the non-commercial use only. For licensing, please contact [e-mail].

Unified masked hardware architecture of ML-KEM (Kyber) and ML-DSA (Dilithium) compliant with NIST standards FIPS203 and FIPS204. It is based on the unprotected design DiKy.

Dataset

This dataset contains power consumption traces captured from a unified hardware implementation of the FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA) post-quantum cryptography standards. The data is intended for side-channel analysis, specifically for evaluating the leakage of signing and decapsulation operations.

Data Format & Structure

The datasets are provided in HDF5 format for efficient access to large-scale trace data. Each file is organized as follows:

Fixed Input Traces: Located in fixed/traces with corresponding inputs in fixed/input (or fixed/inputs for full phases where public components vary).

Random Input Traces: Located in random/traces with corresponding inputs in random/inputs.

Metadata: The settings group contains oscilloscope configurations and sampling parameters.

Input Data Specification

To assist with leakage assessment and attack verification, the input byte ranges are structured as follows:

Byte Range (ML-DSA-44)
Description
Byte Range (ML-KEM-512)
Description

0–2559
Secret key
0–1631
Secret key

2560
Context
1632–2399
Ciphertext

2561–2588
Message
2400–2431
Shared key

2589–5008
Signature

Note on Sampling: Full-phase datasets have been down-sampled to 10 samples per clock cycle to optimize storage while maintaining signal integrity for analysis.