Abstract:Code-based cryptography has received a lot of attention recently because it is considered secure under quantum computing. Among them, the QC-MDPC based scheme is one of the most promising due to its excellent performance. QC-MDPC based schemes are usually subject to a small rate of decryption failure, which can leak information about the secret key. This raises two crucial problems: howto accurately estimate the decryption failure rate and how to use the failure information to recover the secret key. However, the two problems are challenging due to the difficulty of geometrically characterizing the bit-flipping decoder employed in QC-MDPC, such as using decoding radius. In thiswork, we introduce the gathering property and showit is strongly connected with the decryption failure rate of QC-MDPC. Based on this property, we present two results for QC-MDPC based schemes. The first is a new construction of weak keys obtained by extending the keys that have gathering property via ring isomorphism. For the set of weak keys, we present a rigorous analysis of the probability, as well as experimental simulation of the decryption failure rates. Considering BIKE's parameter set targeting 128-bit security, our result eventually indicates that the average decryption failure rate is lower bounded by DFRavg >= 2(-116.61). The second entails two key recovery attacks against CCA secure QC-MDPC schemes using decryption failures in a multi-target setting. The two attacks consider whether or not it is allowed to reuse ciphertexts respectively. In both cases, we show the decryption failures can be used to identify whether a target's secret key satisfies the gathering property. Then using the gathering property as an extra information, we present a modified information set decoding algorithm that efficiently retrieves the target's secret key. For BIKE's parameter set targeting 128-bit security, we show a key recovery attack with complexity 2(116.61) can be mounted if ciphertexts reusing is not permitted, and the complexity can be reduced to 2(98.77) when ciphertexts reusing is permitted.

Cryptanalysis of Private-Key Encryption Schemes Based on Burst-Error-correcting Codes

Lattice-based PKEs/KEMs

On Private-Key Cryptosystems Based on Product Codes.

Notice of Violation of IEEE Publication Principles: Application of LDPC codes on PUF error correction based on code-offset construction

An Efficient Window-Based Countermeasure to Power Analysis of ECC Algorithms

Side-Channel Cube Attacks on EPCBC

Statistical analysis of error patterns in block ciphered crypto-system

Secure and linear cryptosystems using error-correcting codes

Burst-error-correcting Algorithm for Reed-Solomon Codes and Its Performance over a Bursty Channel

Remarks on the Bounds for Cryptanalysis of Low Private Key RSA

Burst-error-correcting algorithm for Reed-Solomon codes

Cryptanalysis of Two McEliece Cryptosystems Based on Quasi-Cyclic Codes

Exploring Decryption Failures of BIKE: New Class of Weak Keys and Key Recovery Attacks.

Analysis and improvement of a signcryption scheme with key privacy

Burst-Correcting Codes for the Classic Bursty Channel

A method for obtaining digital signatures and public-key cryptosystems

Cryptanalyzing a class of image encryption schemes based on Chinese Remainder Theorem

The Capability of Error Correction for Burst-Noise Channels Using Error Estimating Code

On Decoding Schemes for the MDPC-McEliece Cryptosystem

A McEliece cryptosystem using permutation codes

Application Of Ldpc Codes On Puf Error Correction Based On Code-Offset Construction