Abstract:We bring in here a novel algebraic approach for attacking the McEliece cryptosystem. It consists in introducing a subspace of matrices representing quadratic forms. Those are associated with quadratic relationships for the component-wise product in the dual of the code used in the cryptosystem. Depending on the characteristic of the code field, this space of matrices consists only of symmetric matrices or skew-symmetric matrices. This matrix space is shown to contain unusually low-rank matrices (rank $2$ or $3$ depending on the characteristic) which reveal the secret polynomial structure of the code. Finding such matrices can then be used to recover the secret key of the scheme. We devise a dedicated approach in characteristic $2$ consisting in using a Gröbner basis modeling that a skew-symmetric matrix is of rank $2$. This allows to analyze the complexity of solving the corresponding algebraic system with Gröbner bases techniques. This computation behaves differently when applied to the skew-symmetric matrix space associated with a random code rather than with a Goppa or an alternant code. This gives a distinguisher of the latter code family. We give a bound on its complexity which turns out to interpolate nicely between polynomial and exponential depending on the code parameters. A distinguisher for alternant/Goppa codes was already known [FGO+11]. It is of polynomial complexity but works only in a narrow parameter regime. This new distinguisher is also polynomial for the parameter regime necessary for [FGO+11] but contrarily to the previous one is able to operate for virtually all code parameters relevant to cryptography. Moreover, we use this matrix space to find a polynomial time attack of the McEliece cryptosystem provided that the Goppa code is distinguishable by the method of [FGO+11] and its degree is less than $q-1$, where $q$ is the alphabet size of the code.

Twisted Gabidulin Codes in the GPT Cryptosystem

An extension of Overbeck's attack with an application to cryptanalysis of Twisted Gabidulin-based schemes

A new McEliece-type cryptosystem using Gabidulin-Kronecker product codes

Goppa-like AG codes from $C_{a,b}$ curves and their behaviour under squaring their dual

On the Failure of the Smart Approach of the GPT Cryptosystem

A new approach based on quadratic forms to attack the McEliece cryptosystem

LDPC codes in the McEliece cryptosystem: attacks and countermeasures

Two modifications for Loidreau's code-based cryptosystem

On the Security and Design of Cryptosystems Using Gabidulin-Kronecker Product Codes

Cryptanalysis of Two McEliece Cryptosystems Based on Quasi-Cyclic Codes

Smaller Keys for the McEliece Cryptosystem: A Convolutional Variant with GRS Codes

On the matrix code of quadratic relationships for a Goppa code

Security Assessment of the LG Cryptosystem

Twisted skew G-codes

Post-Quantum Cryptography: 11th International Conference, PQCrypto 2020, Paris, France, April 15–17, 2020, Proceedings

Good Gottesman-Kitaev-Preskill codes from the NTRU cryptosystem

Distinguisher-Based Attacks on Public-Key Cryptosystems Using Reed-Solomon Codes

Reducing the Key Size of McEliece Cryptosystem from Automorphism-induced Goppa Codes via Permutations.

Twisted Gan–Gross–Prasad Conjecture For Certain Tempered L-Packets

MinRank Gabidulin encryption scheme on matrix codes