Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data.

Haiyue Dong

dblp:330/0039 · DBLP profile ↗
← Back
3ranked-venue papers
3as first author
3since 2021 · last 2026
—ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 2 first-author · 2 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Cryptographic primitives and cryptanalysis · 100%

Topics — the 2 heaviest of 2, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Cryptographic primitives and cryptanalysis › post-quantum cryptography
code-based cryptography
1.012026
Single-Trace Key Recovery Attacks on HQC Using Valid and Invalid Ciphertexts · EUROCRYPT (7) 2026
Cryptographic primitives and cryptanalysis
post-quantum cryptography
1.012026
Single-Trace Key Recovery Attacks on HQC Using Valid and Invalid Ciphertexts · EUROCRYPT (7) 2026
YearPublicationVenuePosition
2026 Breaking Optimized HQC: The First Cache-Timing Full Decryption Oracle Key-Recovery Attack in Post-quantum Cryptography
abstract
Hamming Quasi-Cyclic (HQC) has been selected by NIST for standardization in the post-quantum landscape. As deployment approaches, implementation security becomes as critical as mathematical hardness. In this work, we demonstrate that source-level constant-time coding is not a standalone guarantee: the compiled binary must inherently preserve this behavior. We identify a severe compiler-induced vulnerability within the official AVX2-optimized implementation of HQC, despite its claims of being constant-time. Although the C source code relies on secure, mask-based conditional selection, certain compiler optimizations rewrite this logic systematically. This transformation silently introduces secret-dependent control flow into the inner Reed-Muller decoding process, resulting in secret-dependent cache access patterns. Exploiting this vulnerability, we mount, to the best of our knowledge, the first cache-timing Full-Decryption-style oracle attack against a post-quantum cryptosystem. Using Flush+Reload on shared libraries, an unprivileged co-located adversary can extract fine-grained predicates of the decoder’s internal state. To achieve full key recovery, we develop a novel, reliability-aware Soft Information Set Decoding (Soft-ISD) post-processing framework. Leveraging a GPU-accelerated meet-in-the-middle strategy optimized for heterogeneous platforms (including Apple Silicon), we demonstrate end-to-end secret key recovery for hqc-1 with less than 10 s of online trace collection.
Haiyue Dong, Qian Guo 0001
CRYPTO (4)1
2026 Single-Trace Key Recovery Attacks on HQC Using Valid and Invalid Ciphertexts
Haiyue Dong, Qian Guo 0001, Denis Nabokov
EUROCRYPT (7)1
2022 Estimation of Internal Wave Parameters based on SAR Images
abstract
Since the synthetic aperture radar (SAR) images of internal wave contain additive and multiplicative noise under the ocean background, it is necessary to extract the internal wave to obtain the parameter information. This paper proposes a variational mode decomposition (VMD) method for separating and extracting internal waves. To solve the ambiguity in the estimation of direction, normalized radon transform in the elliptic domain is combined with the VDM, which can estimate the propagation direction of the internal waves accurately. Then performing experiments on Andaman Sea internal wave data collected by ERS-1 shows that VMD is least disturbed by the background information, and the estimation result of wavelength is closest to the measured value. At the same time, correct results are obtained by using the proposed method to estimate the propagation direction of the measured data from various sea areas, which proves the effectiveness of the proposed method.
Haiyue Dong, Rongqing Xu, Tian Xiao, Yun Zhang 0023
IGARSS1