The syzygy distinguisher

Hugues Randriambololona
2024-07-31
Abstract:We present a new distinguisher for alternant and Goppa codes, whose complexity is subexponential in the error-correcting capability, hence better than that of generic decoding algorithms. Moreover it does not suffer from the strong regime limitations of the previous distinguishers or structure recovery algorithms: in particular, it applies to the codes used in the Classic McEliece candidate for postquantum cryptography standardization. The invariants that allow us to distinguish are graded Betti numbers of the homogeneous coordinate ring of a shortening of the dual code. Since its introduction in 1978, this is the first time an analysis of the McEliece cryptosystem breaks the exponential barrier.
Cryptography and Security,Information Theory,Algebraic Geometry
What problem does this paper attempt to address?
The problem that this paper attempts to solve is to propose a new distinguisher for Goppa codes and alternant codes in the McEliece public - key encryption system. Its complexity is sub - exponential in error - correction ability, which is better than the complexity of the general decoding algorithm. Specifically: 1. **Problem Background**: - Since the McEliece encryption system was proposed in 1978, it has always relied on the special properties of Goppa codes to ensure security. - The security assumptions of this system include: Goppa codes are computationally indistinguishable from random linear codes (Assumption 1), and decoding random linear codes is difficult (Assumption 2). 2. **Existing Challenges**: - The existing distinguishers and structure recovery algorithms are either very strict in parameter requirements or have too high complexity to be applied to practical scenarios, especially for Goppa codes in the Classic McEliece candidate scheme. 3. **New Method**: - The paper proposes a new distinguisher based on the graded Betti numbers of the homogeneous coordinate ring. - The asymptotic complexity of this distinguisher is sub - exponential in error - correction ability, so it is more efficient than the existing general decoding algorithms. - The new method is not only applicable to Goppa codes and alternant codes, but also can overcome the limitations of previous distinguishers and structure recovery algorithms, especially it can be applied to the codes used in the Classic McEliece system. 4. **Innovation Points**: - It uses the graded Betti numbers of the homogeneous coordinate ring as invariants, and these invariants can distinguish different types of codes. - By studying the properties of these invariants, the author can construct an efficient distinguisher, and this distinguisher also performs well under finite parameters. In summary, the main contribution of this paper is to break the exponential barrier of error - correction ability in the McEliece encryption system, provide a new and more effective distinguisher, and thus provide a new tool for further analysis and potential attacks.