Loop-Abort Faults on Lattice-Based Fiat-Shamir and Hash-and-Sign Signatures.

Although postquantum cryptography is of growing practical concern, not many works have been devoted to implementation security issues related to postquantum schemes.