Rank Ceiling for Twiddle-Perturbation Faults on the Forward NTT

Chakshu Gupta

ML-KEM and ML-DSA compute forward number-theoretic transforms on secret polynomials. Their fixed multipliers, or twiddles, are a documented fault-attack target. This paper characte…