Abstract:For Arithmetization-Oriented ciphers and hash functions Gröbner basis attacks are generally considered as the most competitive attack vector. Unfortunately, the complexity of Gröbner basis algorithms is only understood for special cases, and it is needless to say that these cases do not apply to most cryptographic polynomial systems. Therefore, cryptographers have to resort to experiments, extrapolations and hypotheses to assess the security of their designs. One established measure to quantify the complexity of linear algebra-based Gröbner basis algorithms is the so-called solving degree. Caminata \& Gorla revealed that under a certain genericity condition on a polynomial system the solving degree is always upper bounded by the Castelnuovo-Mumford regularity and henceforth by the Macaulay bound, which only takes the degrees and number of variables of the input polynomials into account. In this paper we extend their framework to iterated polynomial systems, the standard polynomial model for symmetric ciphers and hash functions. In particular, we prove solving degree bounds for various attacks on MiMC, Feistel-MiMC, Feistel-MiMC-Hash, Hades and GMiMC. Our bounds fall in line with the hypothesized complexity of Gröbner basis attacks on these designs, and to the best of our knowledge this is the first time that a mathematical proof for these complexities is provided. Moreover, by studying polynomials with degree falls we can prove lower bounds on the Castelnuovo-Mumford regularity for attacks on MiMC, Feistel-MiMC and Feistel-MiMC-Hash provided that only a few solutions of the corresponding iterated polynomial system originate from the base field. Hence, regularity-based solving degree estimations can never surpass a certain threshold, a desirable property for cryptographic polynomial systems.

An upper bound for the solving degree in terms of the degree of regularity

Solving Degree and Degree of Regularity for Polynomial Systems over a Finite Fields.

A degree bound for families of rational curves on surfaces

The solving degrees for computing Gröbner bases of affine semi-regular polynomial sequences

A Generalized Method for Proving Polynomial Calculus Degree Lower Bounds

Bounding the maximum likelihood degree

Solving Degree Bounds For Iterated Polynomial Systems

Forms in prime variables and differing degrees

Dimension-Dependent Upper Bounds for Grobner Bases

A tower lower bound for the degree relaxation of the Regularity Lemma

Uniform bounds on projective dimension and Castelnuovo-Mumford regularity

The stability of the algebraic degree of Boolean functions when restricted to affine spaces

Explicit bounds for the solutions of superelliptic equations over number fields

Bounds for Rational Points on Algebraic Curves, Optimal in the Degree, and Dimension Growth

On the geometric degree of the tangent bundle of a smooth algebraic variety

Exactness and Effective Degree Bound of Lasserre's Relaxation for Polynomial Optimization over Finite Variety

Upper Bounds on Polynomial Root Separation

Formal Power Series on Algebraic Cryptanalysis

Explicit degree bounds for right factors of linear differential operators