Skip to main content

Optimized and Secure Implementation of ROLLO-I

  • 295 Accesses

Part of the Lecture Notes in Computer Science book series (LNSC,volume 12087)


This paper presents our contribution regarding two implementations of the ROLLO-I algorithm, a code-based candidate for the NIST PQC project. The first part focuses on the implementations, and the second part analyzes a side-channel attack and the associated countermeasures. The first implementation uses existing hardware with a crypto co-processor to speed-up operations in \({\mathbb F}_{2^m}\). The second one is a full software implementation (not using the crypto co-processor), running on the same hardware. Finally, the side-channel attack allows us to recover the secret key with only 79 ciphertexts for ROLLO-I-128. We propose countermeasures in order to protect future implementations.


  • Post-quantum cryptography
  • Side-channel attacks
  • ROLLO-I cryptosystem

This is a preview of subscription content, access via your institution.

Buying options

USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
USD   39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions


  1. von Maurich, I., Güneysu, T.: Towards side-channel resistant implementations of QC-MDPC McEliece encryption on constrained devices. In: Mosca, M. (ed.) PQCrypto 2014. LNCS, vol. 8772, pp. 266–282. Springer, Cham (2014).

    CrossRef  Google Scholar 

  2. Richmond, T., et al.: A side-channel attack against the secret permutation on an embedded McEliece cryptosystem. In: 3rd Workshop on Trustworthy Manufacturing and Utilization of Secure Devices - TRUDEVICE 2015, Grenoble, France (2015).

  3. Gaborit, P., et al.: Low rank parity check codes and their application to cryptography, April 2013

    Google Scholar 

  4. Aguilar Melchor, C., et al.: NIST PQC second round submisssion: ROLLO - Rank-Ouroboros, LAKE & LOCKER (2019)

    Google Scholar 

  5. National Institute of Standards and Technology. Submission Requirements and Evaluation Criteria for the Post-Quantum Cryptography Standardization Process (2016).

  6. Hankerson, D., et al.: Guide to Elliptic Curve Cryptography. Springer, Heidelberg (2003)

    MATH  Google Scholar 

  7. Cohen, H., et al.: Handbook of Elliptic and Hyperelliptic Curve Cryptography. Discrete Mathematics and Its Applications. CRC Press, Boca Raton (2005)

    CrossRef  Google Scholar 

  8. Weimerskirch, A., Paar, C.: Generalizations of the Karatsuba Algorithm for Efficient Implementations (2006). 13331. Accessed 2 July 2006.

  9. Luks, E.M., et al.: Some algorithms for nilpotent permutation groups. J. Symb. Comput. 23(4), 335–354 (1997).

    CrossRef  MathSciNet  MATH  Google Scholar 

  10. IAR Embedded Workbench.

  11. SEC 1. Standards for Efficient Cryptography Group: Elliptic Curve Cryptography - version 2.0 (2009).

  12. Kocher, P.C.: Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems. In: Koblitz, N. (ed.) CRYPTO 1996. LNCS, vol. 1109, pp. 104–113. Springer, Heidelberg (1996).

    CrossRef  Google Scholar 

  13. Aguilar Melchor, C., et al.: Constant-time algorithms for ROLLO (2019).

  14. Aragon, N., et al.: NIST PQC second round submisssion: BIKE - Bit Flipping Key Encapsulation (2019)

    Google Scholar 

  15. Aguilar Melchor, C., et al.: NIST PQC second round submisssion: Hamming Quasi-Cyclic (HQC) (2019)

    Google Scholar 

  16. Aguilar Melchor, C., et al.: NIST PQC second round submisssion: Rank Quasi-Cyclic (RQC) (2019)

    Google Scholar 

  17. McEliece, R.J.: A public-key cryptosystem based on algebraic coding theory. Deep Space Netw. Prog. Rep. 44, 114–116 (1978)

    Google Scholar 

Download references


We would like to thank the CBCrypto 2020 reviewers for their valuable comments and suggestions. We also thank Steve Clark and Tania Richmond for proofreading the revised version of the paper and for useful discussions.

Author information

Authors and Affiliations


Corresponding author

Correspondence to Lina Mortajine .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and Permissions

Copyright information

© 2020 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Mortajine, L., Benchaalal, O., Cayrel, PL., El Mrabet, N., Lablanche, J. (2020). Optimized and Secure Implementation of ROLLO-I. In: Baldi, M., Persichetti, E., Santini, P. (eds) Code-Based Cryptography. CBCrypto 2020. Lecture Notes in Computer Science(), vol 12087. Springer, Cham.

Download citation

  • DOI:

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-54073-9

  • Online ISBN: 978-3-030-54074-6

  • eBook Packages: Computer ScienceComputer Science (R0)