Abstract:We bring in here a novel algebraic approach for attacking the McEliece cryptosystem. It consists in introducing a subspace of matrices representing quadratic forms. Those are associated with quadratic relationships for the component-wise product in the dual of the code used in the cryptosystem. Depending on the characteristic of the code field, this space of matrices consists only of symmetric matrices or skew-symmetric matrices. This matrix space is shown to contain unusually low-rank matrices (rank $2$ or $3$ depending on the characteristic) which reveal the secret polynomial structure of the code. Finding such matrices can then be used to recover the secret key of the scheme. We devise a dedicated approach in characteristic $2$ consisting in using a Gröbner basis modeling that a skew-symmetric matrix is of rank $2$. This allows to analyze the complexity of solving the corresponding algebraic system with Gröbner bases techniques. This computation behaves differently when applied to the skew-symmetric matrix space associated with a random code rather than with a Goppa or an alternant code. This gives a distinguisher of the latter code family. We give a bound on its complexity which turns out to interpolate nicely between polynomial and exponential depending on the code parameters. A distinguisher for alternant/Goppa codes was already known [FGO+11]. It is of polynomial complexity but works only in a narrow parameter regime. This new distinguisher is also polynomial for the parameter regime necessary for [FGO+11] but contrarily to the previous one is able to operate for virtually all code parameters relevant to cryptography. Moreover, we use this matrix space to find a polynomial time attack of the McEliece cryptosystem provided that the Goppa code is distinguishable by the method of [FGO+11] and its degree is less than $q-1$, where $q$ is the alphabet size of the code.

Guessing Specific Variables in Algebraic Attacks on Bivium

Solving Generalized Bivariate Integer Equations and Its Application to Factoring With Known Bits

Middle-Solving Grobner bases algorithm for cryptanalysis over finite fields

Probability Method for Cryptanalysis of General Multivariate Modular Linear Equation

Flexible partial enlargement to accelerate gröbner basis computation over F2

A multistep strategy for polynomial system solving over finite fields and a new algebraic attack on the stream cipher Trivium

A Constructive Method of Algebraic Attack with Less Keystream Bits

Solving Degree Bounds For Iterated Polynomial Systems

Algebraic Side-Channel Attacks on KLEIN

Equational Bit-Vector Solving via Strong Gröbner Bases

A new approach based on quadratic forms to attack the McEliece cryptosystem

Analysis of Multivariate Encryption Schemes: Application to Dob and

Algebraic, Aida/Cube And Side Channel Analysis Of Katan Family Of Block Ciphers

Stream/block ciphers, difference equations and algebraic attacks

Embedded Surface Attack on Multivariate Public Key Cryptosystems from Diophantine Equations.

Parity (XOR) Reasoning for the Index Calculus Attack

Cryptanalysis of General Lu-Lee Type Systems

Algebraic Attack on the MQQ Public Key Cryptosystem

Cryptanalysis of Rational Multivariate Public Key Cryptosystems

Gröbner Basis Cryptanalysis of Ciminion and Hydra

Analysing Relations involving small number of Monomials in AES S- Box