Patent ID: 11924346
Assignee: NXP B.V.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. A method for masked sampling of polynomials for lattice-based cryptography, comprising:
determining a number m of random bits to be sampled based upon a sample bound parameter β;
producing a plurality of Boolean masked shares of a polynomial coefficient each having the determined number m of random bits using a uniform random function;
determining that the polynomial coefficient is within a range of values based upon the sample bound parameter β;
converting the plurality of Boolean masked shares of the polynomial coefficient to a plurality of arithmetic masked shares of the polynomial coefficient;
shifting the plurality of arithmetic masked shares based upon the sample bound parameter β; and
performing lattice-based cryptography using masked sampling of the polynomial coefficients using the plurality of shifted arithmetic masked shares.