> research_timeline / 18 papers / 2021–2026
Research Timeline
Published EM-SCA and PQC side-channel attacks — sorted by year, venue, and traces required.
IEEE S&PCCSUSENIXCHESTCHESIEEE
Papers per Year
Papers by Venue
Best Attack Efficiency
Min traces required per year
■ ≤10 traces■ ≤1k■ >1k
/ Attack Taxonomy
Passive EM-SCA
- SEMASimple EM Analysis — visual inspection of single traces
- DEMADifferential EM — statistical difference between trace sets
- CEMACorrelation EM — Pearson correlation with leakage model
- DL-basedCNN/LSTM/Transformer neural profiling attacks
- TemplateMultivariate Gaussian characterization of leakage
- TEMATransient EM — asynchronous 2–6 GHz transients
Active EM
- EM Fault InjectionPulse-induced instruction skip or bit flip
- EM RowhammerTuned EM field induces flash memory bit flips
- FAUST/EMCombined passive SCA + active fault injection
TEMPEST
- Screen GleaningReconstruct display content from EM emissions
- Keyboard LoggingInfer keystrokes via PS/2 / USB EM
- Network TapReconstruct Ethernet data from cable radiation
/ Paper Timeline
2026(6 papers)
CCS
EMFormer ViT
DL (Transformer) · ATmega328P ×10
500
traces
IEEE S&P
CEML Contrastive Learning
Self-supervised DL · AES-256
100
traces
IEEE S&P
Edge TPU Model Extraction
Broad-spectrum EM · Edge TPU
5,000
traces
USENIX
EM-Sight Fault Injection
Precision EM Fault · Various
1 trace
traces
USENIX
EM-Probe Microarch.
Microarch. Inference · x86 (shielded)
1,000
traces
TCHES
Automotive CAN EM Leak
CEMA Cross-domain · NXP S32G / RH850
20,000
traces
2025(5 papers)
IEEE S&P
Multi-channel Spatial EM
MIMO Beamforming · ARM Cortex-M4
500
traces
IEEE S&P
EM Rowhammer Flash
EM Fault · STM32H7
1 trace
traces
TCHES
TEMA Transient EM
Transient EM · Secure Element
30,000
traces
CHES
PQC Survey 12 Targets
NTT Single-Trace · Kyber (various)
1 trace
traces
USENIX
RISC-V Scalar-Crypto EM
CEMA · SiFive X280
10,000
traces
2024(2 papers)
IEEE
Dilithium Horizontal EM
Horizontal EM · Dilithium (masked)
500,000
traces
IEEE
FALCON Fault Attack
Fault · FALCON
1 trace
traces
2023(2 papers)
IEEE
Kyber CPA Decode
CPA · Kyber-768
50,000
traces
IEEE
Dilithium CPA NTT
CPA · Dilithium-3
30,000
traces
2022(2 papers)
CHES
FALCON CDT Template
Template · FALCON
40,000
traces
IEEE
Dilithium SPA Rejection
SPA · Dilithium-3
5,000
traces
2021(1 papers)
TCHES
Masked Kyber EM (FPGA)
EM Template · Kyber-768
200,000
traces