Abstract:Code-based public-key cryptosystems are promising candidates for standardization as quantum-resistant public-key cryptographic algorithms. Their security is based on the hardness of the syndrome decoding problem. Computing the syndrome in a finite field, usually F2documentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$mathbb {F}_{2}$$end{document}, guarantees the security of the constructions. We show in this article that the problem becomes considerably easier to solve if the syndrome is computed in Ndocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$mathbb {N}$$end{document} instead. By means of laser fault injection, we illustrate how to compute the matrix-vector product in Ndocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$mathbb {N}$$end{document} by corrupting specific instructions, and validate it experimentally. To solve the syndrome decoding problem in Ndocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$$mathbb {N}$$end{document}, we propose a reduction to an integer linear programming problem. We leverage the computational efficiency of linear programming solvers to obtain real-time message recovery attacks against the code-based proposal to the NIST Post-Quantum Cryptography standardization challenge. We perform our attacks in the worst-case scenario, i.e. considering random binary codes, and retrieve the initial message within minutes on a desktop computer.Our attack targets the reference implementation of the Niederreiter cryptosystem in the NIST PQC competition finalist Classic McEliece and is practically feasible for all proposed parameters sets of this submission. For example, for the 256-bit security parameters sets, we successfully recover the message in a couple of seconds on a desktop computer Finally, we highlight the fact that the attack is still possible if only a fraction of the syndrome entries are faulty. This makes the attack feasible even though the fault injection does not have perfect repeatability and reduces the computational complexity of the attack, making it even more practical overall.

Quantum All-Subkeys-Recovery Attacks on 6-round Feistel-2* Structure Based on Multi-Equations Quantum Claw Finding

Quantum key-recovery attack on Feistel structures

Quantum attacks on some feistel block ciphers

Quantum attacks on generalized Feistel networks based on the strong–weak separability

Quantum cryptanalysis on some generalized Feistel schemes

New Demiric–Selçuk meet-in-the-middle attacks on Misty and Feistel schemes

Quantum Attacks: A View of Data Complexity on Offline Simon's Algorithm.

Quantum Attacks on 1K-AES and PRINCE

Allocating Rotational Cryptanalysis-Based Preimage Attack on 4-Round Keccak-224 for Quantum Setting

Quantum Security Analysis of the Key-Alternating Ciphers

Quantum Key-length Extension

Design and Cryptanalysis of a New Iterative Structure

Quantum Rectangle Attack and Its Application on Deoxys-BC

Quantum Attacks on MIBS Block Cipher Based on Bernstein–Vazirani Algorithm

Quantum forgery attacks against OTR structures based on Simon's algorithm

Cryptanalysis of two quartic encryption schemes and one improved MFE scheme

Three-subset meet-in-the-middle attack on reduced XTEA

Message-Recovery Laser Fault Injection Attack on the Classic McEliece Cryptosystem

Improved Single-Key Attacks on 9-Round AES-192/256.

Chosen-Key Distinguishers on 12-Round Feistel-SP and 11-Round Collision Attacks on Its Hashing Modes

Square Attack on Some Special Feistel Ciphers