Cryptanalysis of some protocols using matrices over group rings

Mohammad Eftekhari

DOI: https://doi.org/10.48550/arXiv.1503.04779

2015-03-17

Abstract:We address a cryptanalysis of two protocols based on the supposed difficulty of discrete logarithm problem on (semi) groups of matrices over a group ring. We can find the secret key and break entirely the protocols.

Cryptography and Security

What problem does this paper attempt to address?

Cryptanalysis of some Nonabelian Group-Based Key Exchange Protocols

Simran Tinani,Carlo Matteotti,Joachim Rosenthal

2023-10-08

Abstract:In the recently emerging field of nonabelian group-based cryptography, a prominently used one-way function is the Conjugacy Search Problem (CSP), and two important classes of platform groups are polycyclic and matrix groups. In this paper, we discuss the complexity of the conjugacy search problem (CSP) in these two classes of platform groups using the three protocols in [10], [26], and [29] as our starting point. We produce a polynomial time solution for the CSP in a finite polycyclic group with two generators, and show that a restricted CSP is reducible to a DLP. In matrix groups over finite fields, we usedthe Jordan decomposition of a matrix to produce a polynomial time reduction of an A-restricted CSP, where A is a cyclic subgroup of the general linear group, to a set of DLPs over an extension of Fq. We use these general methods and results to describe concrete cryptanalysis algorithms for these three systems. In particular, we show that in the group of invertible matrices over finite fields and in polycyclic groups with two generators, a CSP where conjugators are restricted to a cyclic subgroup is reducible to a set of O(n2) discrete logarithm problems. Using our general results, we demonstrate concrete cryptanalysis algorithms for each of these three schemes. We believe that our methods and findings are likely to allow for several other heuristic attacks in the general case.

Cryptography and Security,Computational Complexity
A Linear Attack on a Key Exchange Protocol Using Extensions of Matrix Semigroups.

Jintai Ding,Alexei Miasnikov,Alexander Ushakov

2015-01-01

Abstract:In this paper we analyze the Kahrobaei-Lam-Shpilrain (KLS) key exchange protocols that use extensions by endomorpisms of matrices over a Galois field proposed in [2]. We show that both protocols are vulnerable to a simple linear algebra attack.
Cryptanalysis of protocols using (Simultaneous) Conjugacy Search Problem in certain Metabelian Platform Groups

Delaram Kahrobaei,Carmine Monetta,Ludovic Perret,Maria Tota,Martina Vigorito

2023-09-25

Abstract:There are many group-based cryptosystems in which the security relies on the difficulty of solving Conjugacy Search Problem (CSP) and Simultaneous Conjugacy Search Problem (SCSP) in their underlying platform groups. In this paper we give a cryptanalysis of these systems which use certain semidirect product of abelian groups.

Group Theory,Cryptography and Security
Secure Key Exchange in Tropical Cryptography: Leveraging Efficiency with Advanced Block Matrix Protocols

Mariana Durcheva,Kiril Danilchenko

DOI: https://doi.org/10.3390/math12101429

IF: 2.4

2024-05-07

Mathematics

Abstract:In the quest for robust and efficient digital communication, this paper introduces cutting-edge key exchange protocols leveraging the computational prowess of tropical semirings and the structural resilience of block matrices. Moving away from the conventional use of finite fields, these protocols deliver markedly faster processing speeds and heightened security. We present two implementations of our concept, each utilizing a different platform for the set of commuting matrices: one employing tropical polynomials of matrices and the other employing Linde–de la Puente matrices. The inherent simplicity of tropical semirings leads to a decrease in operational complexity, while using block matrices enhances our protocols' security profile. The security of these protocols relies on the Matrix Decomposition Problem. In addition, we provide a comparative analysis of our protocols against existing matrix block-based protocols in finite fields. This research marks a significant shift in cryptographic protocol design, is specifically tailored for demanding engineering applications, and sets a new standard in secure and efficient digital communication.

mathematics
The Matrix Reloaded: A Mechanized Formal Analysis of the Matrix Cryptographic Suite

Jacob Ginesin,Cristina Nita-Rotaru

2024-12-08

Abstract:Secure instant group messaging applications such as WhatsApp, Facebook Messenger, Matrix, and the Signal Application have become ubiquitous in today's internet, cumulatively serving billions of users. Unlike WhatsApp, for example, Matrix can be deployed in a federated manner, allowing users to choose which server manages their chats. To account for this difference in architecture, Matrix employs two novel cryptographic protocols: Olm, which secures pairwise communications, and Megolm, which relies on Olm and secures group communications. Olm and Megolm are similar to and share security goals with Signal and Sender Keys, which are widely deployed in practice to secure group communications. While Olm, Megolm, and Sender Keys have been manually analyzed in the computational model, no symbolic analysis nor mechanized proofs of correctness exist. Using mechanized proofs and computer-aided analysis is important for cryptographic protocols, as hand-written proofs and analysis are error-prone and often carry subtle mistakes. Using Verifpal, we construct formal models of Olm and Megolm, as well as their composition. We prove various properties of interest about Olm and Megolm, including authentication, confidentiality, forward secrecy, and post-compromise security. We also mechanize known limitations, previously discovered attacks, and trivial attacker wins from the specifications and previous literature. Finally, we model Sender Keys and the composition of Signal with Sender Keys in order to draw a comparison with Olm, Megolm, and their composition. From our analysis we conclude the composition of Olm and Megolm has comparable security to the composition of Signal and Sender Keys if Olm pre-keys are signed, and provably worse post-compromise security if Olm pre-keys are not signed.

Cryptography and Security
Cryptanalysis of a Key Exchange Protocol Based on a Congruence-Simple Semiring Action

A. Otero Sánchez,J. A. López Ramos,A. Otero Sanchez,J. A. Lopez Ramos

DOI: https://doi.org/10.1142/s0219498825502299

2024-02-28

Journal of Algebra and Its Applications

Abstract:We show that a previously introduced key exchange based on a congruence-simple semiring action is not secure by providing an attack that reveals the shared key from the distributed public information for any of such semirings.

mathematics, applied
Asymmetric Cryptography Based on the Tropical Jones Matrix

Huawei Huang,Weisha Kong,Ting Xu

DOI: https://doi.org/10.3390/sym16040456

2024-04-10

Symmetry

Abstract:In recent years, the tropical polynomial factorization problem, the tropical matrix decomposition problem, and the tropical multivariate quadratic equation solving problem have been proved to be NP-hard. Some asymmetric cryptographic systems based on tropical semirings have been proposed, but most of them are insecure and have been successfully attacked. In this paper, a new key exchange protocol and a new encryption protocol are proposed based on the difficulty of finding the multiple exponentiation problem of the tropical Jones matrices. The analysis results indicate that our protocol can resist various existing attacks. The complexity of attacking an MEP by adversaries is raised due to the larger number of combinations in the tropical Jones matrices compared to regular matrix polynomials. Furthermore, the index semiring is the non-negative integer cyclic matrix semiring, leading to a higher efficiency in key generation.

multidisciplinary sciences
Cryptographic Secrecy Analysis of Matrix Embedding

Jiayong Chen,Jiufen Liu,Weiming Zhang,Huisheng Liu,Xianfeng Zhao

DOI: https://doi.org/10.1080/18756891.2013.802116

2010-01-01

Abstract:For good security and large payload in information hiding, matrix embedding is a popular method for increasing the embedding efficiency. This paper analyzes the security of matrix embedding against cryptanalytic attacks. The secrecy security of matrix embedding using information theory under the conditions of known-cover attack and chosen-stego attack is studied. After that, the unicity distance of the key, message equivocation and the relationship among wet ratio, embedding rate and key equivocation for the wet paper channel are given through analyzing the key model under the known-cover attack condition. Furthermore, an effective differential attack to matrix embedding under chosen-stego attack condition is proposed. The results of analysis show that the matrix embedding is not secure enough with respect to cryptographic secrecy against the stronger adversaries.
Cryptoanalysis of a key exchange protocol based on a congruence-simple semiring action

Otero Sanchez Alvaro,Lopez Ramos Juan Antonio

2024-02-13

Abstract:We show that a previously introduced key exchange based on a congruence-simple semiring action is not secure by providing an attack that reveals the shared key from the distributed public information for any of such semirings

Cryptography and Security
A New Analysis Method of Cryptographic Protocols

QIAN Yong,ZHANG Yong,BAI Yingcai

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.03.008

2001-01-01

Abstract:An approach which made use of running modes of two-party cryptographic protocols to analyze protocols was put forwarded in [1]. Through some counter-examples, we found flaws in the approach. In this paper, an efficient method is developed, which matchs faked messages with received set of attacks,messages in other run of protocol. Using the method, we found holes of some cryptographic protocols successly.
The security analysis of the key exchange protocol based on the matrix power function defined over a family of non-commuting groups

Aleksejus Mihalkovich,Jokubas Zitkevicius,Eligijus Sakalauskas

DOI: https://doi.org/10.3934/math.20241312

2024-01-01

AIMS Mathematics

Abstract:In this paper, we revisited the previously proposed key exchange protocol based on the matrix power function. We prove that the entries of the public key matrices of both parties of the protocol are uniform. Using this result we defined a security game for our protocol and show that the malicious attacker cannot gain any significant advantage in winning this game by applying faithful representation or the linearization approaches. Moreover, we showed that the shared key is computationally indistinguishable from the imitation key if the security parameters are properly chosen.

mathematics, applied
Cryptanalysis of Symmetric Primitives over Rings and a Key Recovery Attack on Rubato.

Lorenzo Grassi,Irati Manterola Ayala,Martha Norberg Hovd,Morten Oygarden,Havard Raddum,Qingju Wang

DOI: https://doi.org/10.1007/978-3-031-38548-3_11

2023-01-01

Abstract:Symmetric primitives are a cornerstone of cryptography, and have traditionally been defined over fields, where cryptanalysis is now well understood. However, a few symmetric primitives defined over rings Z q for a composite number q have recently been proposed, a setting where security is much less studied. In this paper we focus on studying established algebraic attacks typically defined over fields and the extent of their applicability to symmetric primitives defined over the ring of integers modulo a composite q . Based on our analysis, we present an attack on full Rubato, a family of symmetric ciphers proposed by Ha et al. at Eurocrypt 2022 designed to be used in a transciphering framework for approximate fully homomorphic encryption. We show that at least 25 % of the possible choices for q satisfy certain conditions that lead to a successful key recovery attack with complexity significantly lower than the claimed security level for five of the six ciphers in the Rubato family.
Cryptanalysis of a Homomorphic Encryption Scheme Over Integers.

Jingguo Bi,Jiayang Liu,Xiaoyun Wang

DOI: https://doi.org/10.1007/978-3-319-54705-3_15

2016-01-01

Abstract:At Eurocrypt 2010, van Dijk et al. described a fully homomorphic encryption scheme (abbreviated as DGHV) over integers. It is conceptually simple but the public key size is large. After DGHV scheme was proposed, many variants of DGHV schemes with smaller public key size were proposed. In this paper, we present a multi-ciphertexts attack on a variant of the DGHV scheme with much smaller public key (abbreviated as (HE^{RK})), which was proposed by Govinda Ramaiah and Vijaya Kumari at CNC 2012. Multi-ciphertexts attack considers the security of the schemes when the attacker captures a certain amount of ciphertexts. It is a common phenomena that the attacker can easily obtain enough ciphertexts in most of practical applications of fully homomorphic encryptions (even for public-key schemes). For all the four groups of the recommended parameters of (HE^{RK}), we can recover the plaintexts successfully if we only capture five ciphertexts. Our attack only needs to apply LLL algorithm twice on two small dimension lattices, and the data show that the plaintexts can be recovered in seconds.
Cryptanalysis on Four Two-Party Authentication Protocols

Yalin Chen,Jue-Sam Chou*,Chun-Hui Huang

DOI: https://doi.org/10.48550/arXiv.1007.0060

2010-07-01

Abstract:In this paper, we analyze four authentication protocols of Bindu et al., Goriparthi et al., Wang et al. and Hölbl et al.. After investigation, we reveal several weaknesses of these schemes. First, Bindu et al.'s protocol suffers from an insider impersonation attack if a malicious user obtains a lost smart card. Second, both Goriparthi et al.'s and Wang et al.'s protocols cannot withstand a DoS attack in the password change phase, i.e. an attacker can involve the phase to make user's password never be used in subsequent authentications. Third, Hölbl et al.'s protocol is vulnerable to an insider attack since a legal but malevolent user can deduce KGC's secret key.

Cryptography and Security
Efficient quantum algorithms to break group ring cryptosystems

Ann Dooms,Carlo Emerencia

DOI: https://doi.org/10.1016/j.jisa.2024.103923

IF: 4.96

2024-11-29

Journal of Information Security and Applications

Abstract:The security of widely-used public-key cryptographic protocols like RSA, Diffie–Hellman key exchange and the Digital Signature Algorithm (DSA) is under threat due to the emergence of quantum computers. Shor's groundbreaking quantum algorithm poses a significant risk by efficiently factoring large integers into their prime factors, compromising RSA security. Additionally, it solves the Discrete Logarithm Problem, impacting certain Diffie–Hellman-based cryptosystems and digital signatures. Given this, it is imperative to enhance our current cryptographic tools for the post-quantum era, aiming to make it impractical, even with quantum algorithms, to breach the security of new cryptosystems. Prominent alternatives include elliptic curve and lattice-based cryptography, with exploration into other algebraic systems featuring difficult problems to ensure security. This paper establishes that systems based on the difficulty of inverting group ring elements are not quantum-resistant.

computer science, information systems
Cryptanalysis of Two McEliece Cryptosystems Based on Quasi-Cyclic Codes

Ayoub Otmani,Jean-Pierre Tillich,Leonard Dallot

DOI: https://doi.org/10.48550/arXiv.0804.0409

2010-01-04

Abstract:We cryptanalyse here two variants of the McEliece cryptosystem based on quasi-cyclic codes. Both aim at reducing the key size by restricting the public and secret generator matrices to be in quasi-cyclic form. The first variant considers subcodes of a primitive BCH code. We prove that this variant is not secure by finding and solving a linear system satisfied by the entries of the secret permutation matrix. The other variant uses quasi-cyclic low density parity-check codes. This scheme was devised to be immune against general attacks working for McEliece type cryptosystems based on low density parity-check codes by choosing in the McEliece scheme more general one-to-one mappings than permutation matrices. We suggest here a structural attack exploiting the quasi-cyclic structure of the code and a certain weakness in the choice of the linear transformations that hide the generator matrix of the code. Our analysis shows that with high probability a parity-check matrix of a punctured version of the secret code can be recovered in cubic time complexity in its length. The complete reconstruction of the secret parity-check matrix of the quasi-cyclic low density parity-check codes requires the search of codewords of low weight which can be done with about $2^{37}$ operations for the specific parameters proposed.

Cryptography and Security,Discrete Mathematics
Perturbed Hidden Matrix Cryptosystems

WU Zhi-ping,Jíntai Ding,Jason E. Gower,Dingfeng Ye

DOI: https://doi.org/10.1007/11424826_63

2005-01-01

Abstract:We apply internal perturbation [3] to the matrix-type cryptosystems [C n ] and HM constructed in [9]. Using small instances of these variants, we investigate the existence of linearization equations and degree 2 equations that could be used in a XL attack. Our results indicate that these new variants may be suitable for use in practical implementations. We propose a specific instance for practical implementation, and estimate its performance and security.
An RSA Cryptosystem over a Halidon Group Ring of a Dihedral Group

A. Telveenus

2024-10-28

Abstract:The article explores the creation of a cryptosystem using a halidon group ring of a dihedral group. Due to the non-abelian nature of the group, constructing the cryptosystem is more challenging compared to an abelian group. The logic used to develop a decryption programme was also quite complex.

Cryptography and Security
Remarks on a Tropical Key Exchange System

Dylan Rudy,Chris Monico

DOI: https://doi.org/10.48550/arXiv.2005.04363

2020-09-22

Abstract:We consider a key-exchange protocol based on matrices over a tropical semiring which was recently proposed in \cite{grig19}. We show that a particular private parameter of that protocol can be recovered with a simple binary search, rendering it insecure.

Cryptography and Security
Cryptanalysis of shifted conjugacy authentication protocol

Jonathan Longrigg,Alexander Ushakov

DOI: https://doi.org/10.48550/arXiv.0708.1768

2007-08-14

Group Theory

Abstract:In this paper we present the first practical attack on the shifted conjugacy-based authentication protocol proposed by P. Dehornoy. We discuss the weaknesses of that primitive and propose ways to improve the protocol.

Cryptanalysis of some protocols using matrices over group rings

Cryptanalysis of some Nonabelian Group-Based Key Exchange Protocols

A Linear Attack on a Key Exchange Protocol Using Extensions of Matrix Semigroups.

Cryptanalysis of protocols using (Simultaneous) Conjugacy Search Problem in certain Metabelian Platform Groups

Secure Key Exchange in Tropical Cryptography: Leveraging Efficiency with Advanced Block Matrix Protocols

The Matrix Reloaded: A Mechanized Formal Analysis of the Matrix Cryptographic Suite

Cryptanalysis of a Key Exchange Protocol Based on a Congruence-Simple Semiring Action

Asymmetric Cryptography Based on the Tropical Jones Matrix

Cryptographic Secrecy Analysis of Matrix Embedding

Cryptoanalysis of a key exchange protocol based on a congruence-simple semiring action

A New Analysis Method of Cryptographic Protocols

The security analysis of the key exchange protocol based on the matrix power function defined over a family of non-commuting groups

Cryptanalysis of Symmetric Primitives over Rings and a Key Recovery Attack on Rubato.

Cryptanalysis of a Homomorphic Encryption Scheme Over Integers.

Cryptanalysis on Four Two-Party Authentication Protocols

Efficient quantum algorithms to break group ring cryptosystems

Cryptanalysis of Two McEliece Cryptosystems Based on Quasi-Cyclic Codes

Perturbed Hidden Matrix Cryptosystems

An RSA Cryptosystem over a Halidon Group Ring of a Dihedral Group

Remarks on a Tropical Key Exchange System

Cryptanalysis of shifted conjugacy authentication protocol