<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of cea-04706832</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-16T00:04:53+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">On the practical CPA$^D$ security of “exact” and threshold FHE schemes and libraries</title>
            <author role="aut">
              <persName>
                <forename type="first">Marina</forename>
                <surname>Checri</surname>
              </persName>
              <idno type="halauthorid">2977742-0</idno>
              <affiliation ref="#struct-1071830"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Renaud</forename>
                <surname>Sirdey</surname>
              </persName>
              <idno type="halauthorid">244131-0</idno>
              <affiliation ref="#struct-1071830"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Aymen</forename>
                <surname>Boudguiga</surname>
              </persName>
              <idno type="halauthorid">473046-0</idno>
              <affiliation ref="#struct-1071830"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jean-Paul</forename>
                <surname>Bultel</surname>
              </persName>
              <idno type="halauthorid">619359-0</idno>
              <affiliation ref="#struct-1071830"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Aymen</forename>
                <surname>Boudguiga</surname>
              </persName>
              <email type="md5">2049532c1efaaaa8c7596f022204be3c</email>
              <email type="domain">cea.fr</email>
            </editor>
            <funder ref="#projanr-69636"/>
            <funder ref="#projanr-109992"/>
            <funder ref="#projeurop-750358"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2025-03-20 13:41:51</date>
              <date type="whenModified">2025-10-07 16:17:29</date>
              <date type="whenReleased">2025-03-20 16:15:30</date>
              <date type="whenProduced">2024-08-18</date>
              <date type="whenEndEmbargoed">2025-03-20</date>
              <ref type="file" target="https://cea.hal.science/cea-04706832v1/document">
                <date notBefore="2025-03-20"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://cea.hal.science/cea-04706832v1/file/CPADBFV%20%281%29.pdf" id="file-4998655-4332192">
                <date notBefore="2025-03-20"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1595162">
                <persName>
                  <forename>Aymen</forename>
                  <surname>Boudguiga</surname>
                </persName>
                <email type="md5">2049532c1efaaaa8c7596f022204be3c</email>
                <email type="domain">cea.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">cea-04706832</idno>
            <idno type="halUri">https://cea.hal.science/cea-04706832</idno>
            <idno type="halBibtex">checri:cea-04706832</idno>
            <idno type="halRefHtml">&lt;i&gt;Crypto 2024 - 44th Annual International Cryptology Conference&lt;/i&gt;, Aug 2024, Santa Barbara, United States. pp.3-33, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-031-68382-4_1"&gt;&amp;#x27E8;10.1007/978-3-031-68382-4_1&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">Crypto 2024 - 44th Annual International Cryptology Conference, Aug 2024, Santa Barbara, United States. pp.3-33, &amp;#x27E8;10.1007/978-3-031-68382-4_1&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4998655-4332192"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CEA">CEA - Commissariat à l'énergie atomique</idno>
            <idno type="stamp" n="OPENAIRE">OpenAIRE</idno>
            <idno type="stamp" n="DRT" corresp="CEA">Direction de la recherche technologique</idno>
            <idno type="stamp" n="CEA-UPSAY" corresp="CEA">CEA - Université Paris-Saclay</idno>
            <idno type="stamp" n="TDS-MACS">Réseau de recherche en Théorie des Systèmes Distribués, Modélisation, Analyse et Contrôle des Systèmes</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="LIST" corresp="CEA">Laboratoire d'Intégration des Systèmes et des Technologies</idno>
            <idno type="stamp" n="UNIVERSITE-PARIS-SACLAY" corresp="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="GS-COMPUTER-SCIENCE">Graduate School Computer Science</idno>
            <idno type="stamp" n="GS-SPORT-HUMAN-MOVEMENT">Graduate School Sport, Mouvement, Facteurs Humains</idno>
            <idno type="stamp" n="DSCIN" corresp="DRT">Département Systèmes et Circuits Intégrés Numériques</idno>
            <idno type="stamp" n="CYBERSCURITE">PEPR Cybersécurité</idno>
            <idno type="stamp" n="PSACLAY-TEST">Université Paris-Saclay - Collection pour tests</idno>
            <idno type="stamp" n="SECURE_COMPUTE">SECURE_COMPUTE</idno>
            <idno type="stamp" n="TRUSTINCLOUDS">Projet "TRUSTINCloudS" du PEPR Cloud </idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="0">No</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">On the practical CPA$^D$ security of “exact” and threshold FHE schemes and libraries</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Marina</forename>
                    <surname>Checri</surname>
                  </persName>
                  <idno type="halauthorid">2977742-0</idno>
                  <affiliation ref="#struct-1071830"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Renaud</forename>
                    <surname>Sirdey</surname>
                  </persName>
                  <idno type="halauthorid">244131-0</idno>
                  <affiliation ref="#struct-1071830"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Aymen</forename>
                    <surname>Boudguiga</surname>
                  </persName>
                  <idno type="halauthorid">473046-0</idno>
                  <affiliation ref="#struct-1071830"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jean-Paul</forename>
                    <surname>Bultel</surname>
                  </persName>
                  <idno type="halauthorid">619359-0</idno>
                  <affiliation ref="#struct-1071830"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science ((LNCS)</title>
                <meeting>
                  <title>Crypto 2024 - 44th Annual International Cryptology Conference</title>
                  <date type="start">2024-08-18</date>
                  <date type="end">2024-08-22</date>
                  <settlement>Santa Barbara</settlement>
                  <country key="US">United States</country>
                </meeting>
                <imprint>
                  <biblScope unit="volume">14922</biblScope>
                  <biblScope unit="pp">3-33</biblScope>
                  <date type="datePub">2024</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-031-68382-4_1</idno>
              <ref target="https://eprint.iacr.org/2024/116" type="seeAlso"/>
              <ref type="publisher">https://link.springer.com/chapter/10.1007/978-3-031-68382-4_1</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-dm">Computer Science [cs]/Discrete Mathematics [cs.DM]</classCode>
              <classCode scheme="halDomain" n="math.math-nt">Mathematics [math]/Number Theory [math.NT]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In their Eurocrypt'21 seminal paper, Li and Micciancio presented a passive attack against the CKKS approximate FHE scheme and introduced the notion of CPA$^D$ security. The current status quo is that this line of attacks does not apply to "exact" FHE. In this paper, we challenge this status quo by exhibiting a CPA$^D$ key recovery attack on the linearly homomorphic Regev cryptosystem which easily generalizes to other xHE schemes such as BFV, BGV and TFHE showing that these cryptosystems are not CPA$^D$ secure in their basic form. We also show that existing threshold variants of BFV, BGV and CKKS are particularily exposed to CPA$^D$ attackers and would be CPA$^D$-insecure without proper smudging noise addition after partial decryption. Finally we successfully implement our attack against several mainstream FHE libraries and discuss a number of natural countermeasures as well as their consequences in terms of FHE practice, security and efficiency. The attack itself is quite practical as it typically takes less than an hour on an average laptop PC, requiring a few thousand ciphertexts as well as up to around a million evaluations/decryptions, to perform a full key recovery.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-1071830" status="VALID">
          <orgName>Laboratoire pour la Confiance des sYstèmes de calcuL</orgName>
          <orgName type="acronym">LCYL</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>CEA-Palaiseau</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-419361" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-1071779" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="indirect"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-419361" status="VALID">
          <idno type="IdRef">241345251</idno>
          <idno type="ROR">https://ror.org/03xjwb503</idno>
          <orgName>Université Paris-Saclay</orgName>
          <desc>
            <address>
              <addrLine>Bâtiment Bréguet, 3 Rue Joliot Curie 2e ét, 91190 Gif-sur-Yvette</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-paris-saclay.fr/fr</ref>
          </desc>
        </org>
        <org type="department" xml:id="struct-1071779" status="VALID">
          <idno type="RNSR">202123738R</idno>
          <orgName>Département Systèmes et Circuits Intégrés Numériques</orgName>
          <orgName type="acronym">DSCIN (CEA, LIST)</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="direct"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-40217" status="VALID">
          <idno type="IdRef">156836882</idno>
          <idno type="ISNI">0000 0004 0405 1788</idno>
          <idno type="RNSR">200118591H</idno>
          <idno type="ROR">https://ror.org/000dbcc61</idno>
          <idno type="Wikidata">Q30299467</idno>
          <orgName>Laboratoire d'Intégration des Systèmes et des Technologies</orgName>
          <orgName type="acronym">LIST (CEA)</orgName>
          <desc>
            <address>
              <addrLine>DRT/LISTNano-INNOVAvenue de la Vauve91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www-list.cea.fr/</ref>
          </desc>
          <listRelation>
            <relation name="DRT/LIST" active="#struct-440043" type="direct"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-440043" status="VALID">
          <idno type="IdRef">067087930</idno>
          <idno type="ISNI">0000000121157881</idno>
          <idno type="RNSR">199018589D</idno>
          <idno type="ROR">https://ror.org/02ggzyd20</idno>
          <idno type="Wikidata">Q30299418</idno>
          <orgName>Direction de Recherche Technologique (CEA)</orgName>
          <orgName type="acronym">DRT (CEA)</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.drt-cea.com/</ref>
          </desc>
          <listRelation>
            <relation name="DRT" active="#struct-300016" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300016" status="VALID">
          <idno type="IdRef">026372061</idno>
          <idno type="ISNI">0000000122998025</idno>
          <idno type="ROR">https://ror.org/00jjx8s55</idno>
          <idno type="Wikidata">Q868550</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives</orgName>
          <orgName type="acronym">CEA</orgName>
          <desc>
            <address>
              <addrLine>Centre de SaclayCentre de GrenobleCentre de Cadaracheetc</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cea.fr/</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-69636" status="VALID">
          <idno type="anr">ANR-22-PECY-0003</idno>
          <orgName>SecureCompute</orgName>
          <desc>Secure computations</desc>
          <date type="start">2022</date>
        </org>
        <org type="anrProject" xml:id="projanr-109992" status="VALID">
          <idno type="anr">ANR-23-PECL-0009</idno>
          <orgName>TRUSTINClouds</orgName>
          <desc>Sécurité des infrastructures Cloud</desc>
          <date type="start">2023</date>
        </org>
        <org type="europeanProject" xml:id="projeurop-750358" status="VALID">
          <idno type="number">101070670</idno>
          <idno type="program">HORIZON-CL3-2021-CS-01</idno>
          <idno type="call">HORIZON-CL3-2021-CS-01</idno>
          <orgName>ENCRYPT</orgName>
          <desc>A SCALABLE AND PRACTICAL PRIVACY-PRESERVING FRAMEWORK</desc>
          <date type="start">2022-07-01</date>
          <date type="end">2025-06-30</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>