A Low-Randomness First-Order Masked Xoodyak

Xoodyak, a finalist in the Round 3 of the Lightweight Cryptography Standardization Process, is a compact and efficient lightweight cryptographic algorithm. Resistance to side-channel attacks is an important evaluation metric of this Process. In this work, we dedicatedly analyze and realize the domainoriented masking implementation of Xoodyak. We first perform a security evaluation for the domain-oriented masking in Xoodyak’s implementation. Moreover, we propose a randomness reduction technique for domain-oriented masking implementation of Xoodyak, where existing techniques are inapplicable. Finally, our protected design is implemented on FPGA and evaluated on ASIC. Potential side-channel leakage is evaluated using Test Vector Leakage Assessment. Results show that our implementation is compact, side-channel leakage-free, and only consumes 33% of the originally required randomness.