Abstract:Because of their interesting algebraic properties, several authors promote the use of generalized Reed-Solomon codes in cryptography. Niederreiter was the first to suggest an instantiation of his cryptosystem with them but Sidelnikov and Shestakov showed that this choice is insecure. Wieschebrink proposed a variant of the McEliece cryptosystem which consists in concatenating a few random columns to a generator matrix of a secretly chosen generalized Reed-Solomon code. More recently, new schemes appeared which are the homomorphic encryption scheme proposed by Bogdanov and Lee, and a variation of the McEliece cryptosystem proposed by Baldi et \textit{al.} which hides the generalized Reed-Solomon code by means of matrices of very low rank. In this work, we show how to mount key-recovery attacks against these public-key encryption schemes. We use the concept of distinguisher which aims at detecting a behavior different from the one that one would expect from a random code. All the distinguishers we have built are based on the notion of component-wise product of codes. It results in a powerful tool that is able to recover the secret structure of codes when they are derived from generalized Reed-Solomon codes. Lastly, we give an alternative to Sidelnikov and Shestakov attack by building a filtration which enables to completely recover the support and the non-zero scalars defining the secret generalized Reed-Solomon code.

On Private-Key Cryptosystems Based on Product Codes.

Lattice-based PKEs/KEMs

On the Security and Design of Cryptosystems Using Gabidulin-Kronecker Product Codes

Cryptanalysis of Private-Key Encryption Schemes Based on Burst-Error-correcting Codes

On the Security of A Privacy-Preserving Product Calculation Scheme

A new McEliece-type cryptosystem using Gabidulin-Kronecker product codes

Cryptanalysis of Two Searchable Public Key Encryption Schemes with a Designated Tester ⋆

Distinguisher-Based Attacks on Public-Key Cryptosystems Using Reed-Solomon Codes

A McEliece cryptosystem using permutation codes

Improving The Security Of The Mceliece Public-Key Cryptosystem

Secure and linear cryptosystems using error-correcting codes

Analysis and improvement of a signcryption scheme with key privacy

Attack on the Edon-K Key Encapsulation Mechanism

A method for obtaining digital signatures and public-key cryptosystems

On the Security of Public Key Protocols

Simple Matrix - A Multivariate Public Key Cryptosystem (mpkc) for Encryption

Simple Matrix Scheme For Encryption

Cryptanalysis of Novel Extended Multivariate Public Key Cryptosystem

Weak-Keys in Public Key Cryptosystems Based on Discrete Logarithms

Efficient Completely Non-Malleable and RKA Secure Public Key Encryptions

Security Analysis of Public Key Encryption Scheme Based on Attack Classification