Quantifying Side-Channel Leakage in Public Metrology Releases

2026-06-01

AI Summary

This work demonstrates that public release of spectral density statistics can inadvertently leak hidden configuration parameters of generative models. To address this, the authors propose a statistical side-channel auditing framework based on a gamma- and covariance-weighted log-spectral channel model, employing Kullback–Leibler divergence and Chernoff information to quantify information leakage. The study establishes a ninth-order relationship among leakage magnitude, bandwidth, and sample size under finite-bandwidth constraints, derives closed-form expressions for secure bandwidth thresholds, and provides tight upper bounds on both information leakage and adversarial advantage. The theoretical findings are validated through an extreme ultraviolet roughness spectrum case study. The paper also includes a fully reproducible protocol and open-source implementation to facilitate independent verification and extension.

Abstract

Public scientific and metrology releases can leak the hidden settings that produced them. We formalize and quantify this risk as a profiled statistical side-channel audit: a release map exposes finite-band statistics of a power spectral density (PSD), a profiled observer trains labeled template spectra under an explicit budget, and a challenge release is drawn from one of two utility-equivalent recipes separated by a protected coordinate. Averaged PSD bins follow a gamma channel, replaced by a covariance-weighted log-spectrum channel when the bins are correlated; this yields exact Kullback-Leibler divergences, Chernoff exponents, protected-bit advantage bounds, and finite-training, finite-library, finite-compute, and model-mismatch corrections. Our headline result is a finite-band transport-leakage law: after amplitude and blur are eliminated, the protected acid-transport information obeys $I_{λ|α,β}(K) = (64/1225)\, w λ^{6} K^{9} + O(w λ^{8} K^{11})$ for $Kλ\ll 1$, a ninth-order exponent with a closed-form safe band. A step-by-step protocol turns a measured release into these numbers, and a fixed-seed reproducibility package regenerates every table and figure. We instantiate the audit on screened extreme-ultraviolet (EUV) roughness spectra as a model-conditioned case study, with deployment on measured releases the next step.

Problem

• side-channel leakage
• public metrology releases
• information leakage
• profiled statistical audit
• protected settings

Innovation

• side-channel leakage
• power spectral density
• statistical audit
• transport-leakage law
• profiled template attack