Overview of Cryptanalysis Techniques in Multivariate Public Key Cryptography

olivier billet,jintai ding

DOI: https://doi.org/10.1007/978-3-540-93806-4_15

2009-01-01

Abstract:This paper summarizes most of the main developments in the cryptanalysis of multivariate cryptosystems and discuss some problems that remain open. A strong emphasis is put on the symbolic computation tools that have been used to achieve these advances.

What problem does this paper attempt to address?

Current State of Multivariate Cryptography.

Jintai Ding,Albrecht Petzoldt

DOI: https://doi.org/10.1109/msp.2017.3151328

IF: 3.105

2017-01-01

IEEE Security & Privacy

Abstract:A review of the current state of multivariate public-key cryptosystems compares and contrasts the most promising multivariate schemes in digital signatures and public-key encryption as well as their security.
Multivariate Public Key Cryptography

Jintai Ding,Bo-Yin Yang

DOI: https://doi.org/10.1007/978-3-540-88702-7_6

2009-01-01

Abstract:A multivariate public key cryptosystem (MPKCs for short) have a set of (usually) quadratic polynomials over a finite field as its public map. Its main security assumption is backed by the NP-hardness of the problem to solve nonlinear equations over a finite field. This family is considered as one of the major families of PKCs that could resist potentially even the powerful quantum computers of the future. There has been fast and intensive development in Multivariate Public Key Cryptography in the last two decades. Some constructions are not as secure as was claimed initially, but others are still viable. The paper gives an overview of multivariate public key cryptography and discusses the current status of the research in this area.
Cryptanalysis of Novel Extended Multivariate Public Key Cryptosystem

NIE Xu-yun,LIU Bo,LU Gang,ZHONG Ting

DOI: https://doi.org/10.11959/j.issn.1000-436x.2015182

2015-01-01

Abstract:The novel extended multivariate public key cryptosystem is a new security enhancement method on multivariate public key cryptosystems,which is proposed by Qiao,et al.A nonlinear invertible transformation was used,named“tame transformation”,on the original multivariate public key cryptosystem to hide its weakness such as linearization equation.However,it is found that if there are many linearization equations satisfied by the original MPKC,there would be many quadratization equations (QE) satisfied by the improved scheme.Given a public key,after finding all QE,a valid cipheretext can be substituted into the QE to derive a set of quadratic equations on the plaintext variable.This exactly reduce the degree of the system wanted to solve.Then the corresponding plaintext can be recovered for a given valid ciphertext combining with Groebner basis method.
Multivariable Public Key Cryptosystems

Jintai Ding,Dieter Schmidt

DOI: https://doi.org/10.1007/978-1-0716-0987-3

2020-01-01

Abstract:Although RSA is a very successful public key cryptosystem, efforts are under way to find alternative systems, which are computationally more efficient, and which would remain secure even when a big enough quantum computer becomes operational. Multivariable polynomials over a finite field have been used to build new public key cryptosystems. Some of these constructions are not as secure as was claimed initially, but others are still viable. The paper gives on overview over this field and discusses the status of many systems, which have been proposed in the last 20 years.
Cryptanalysis of Rational Multivariate Public Key Cryptosystems

Jintai Ding,John Wagner

DOI: https://doi.org/10.1007/978-3-540-88403-3_9

2008-01-01

Abstract:In 1989, Tsujii, Fujioka, and Hirayama proposed a family of multivariate public key cryptosystems, where the public key is given as a set of multivariate rational functions of degree 4. These cryptosystems are constructed via composition of two quadratic rational maps. In this paper, we present the cryptanalysis of this family of cryptosystems. The key point of our attack is to transform a problem of decomposition of two rational maps into a problem of decomposition of two polynomial maps. We develop a new improved 2R decomposition method and other new techniques, which allows us to find an equivalent decomposition of the rational maps to break the system completely. For the example suggested for practical applications, it is very fast to derive an equivalent private key, and it requires only a few seconds on a standard PC.
Cryptanalysis of a Multivariate Public Key Cryptosystem

LU Gang,NIE Xu-yun,QIN Zhi-guang,HOU Chuan-yong

DOI: https://doi.org/10.3969/j.issn.1001-0548.2018.02.013

2018-01-01

Abstract:In 2014, Yuan et al. proposed a new multivariate public key cryptosystem by combining "small field-big field" and "stepwise triangular" methods. The authors claimed that their scheme can be secure against rank attack, linearization equation attack and differential attack. Through analysis, we found that there are a lot of linearization equations satisfied by this scheme. We can transform it to an equivalent square encryption scheme by linearization equation method and then recover corresponding plaintext for any given cipheretext by differential attack. As to two recommended parameters, for given public key, the complexities of recovering plaintext are 233 and 235, respectively. The results above are further confirmed by computer experiments.
Simple Matrix - A Multivariate Public Key Cryptosystem (mpkc) for Encryption

Chengdong Tao,Hong Xiang,Albrecht Petzoldt,Jintai Ding

DOI: https://doi.org/10.1016/j.ffa.2015.06.001

IF: 1.655

2015-01-01

Finite Fields and Their Applications

Abstract:Multivariate cryptography is one of the main candidates to guarantee the security of communication in the presence of quantum computers. While there exist a large number of secure and efficient multivariate signature schemes, the number of practical multivariate encryption schemes is somewhat limited. In this paper we present our results on creating a new multivariate encryption scheme, which is an extension of the original Simple Matrix encryption scheme of PQCrypto 2013. Our scheme allows fast en- and decryption and resists all known attacks against multivariate cryptosystems. Furthermore, we present a new idea to solve the decryption failure problem of the original Simple Matrix encryption scheme. (C) 2015 Elsevier Inc. All rights reserved.
A new encryption scheme for multivariate quadratic systems.

Jiahui Chen,Jianting Ning,Jie Ling,Terry Shue Chien Lau,Yacheng Wang

DOI: https://doi.org/10.1016/j.tcs.2019.12.032

IF: 1.002

2020-01-01

Theoretical Computer Science

Abstract:It is regarded as a difficult task to design a secure MPKC fundamental schemes such as an encryption scheme. In this paper we introduce a new central trapdoor for multivariate quadratic (MQ) public-key cryptosystems that allows for encryption, in contrast to time-tested MQ primitives such as Unbalanced Oil and Vinegar or Rainbow which only allow for signatures. The same as UOV or Rainbow, our construction is single field scheme where the central polynomial system is chosen to have a particular structure that enables efficient inversion. After applying this transformation, the plaintext can be recovered by solving a linear system. Our new central trapdoor can use to replace the broken extension field calculation trapdoor and simple matrix encryption trapdoor, thereafter, we use the minus and plus modifiers to inoculate our scheme against known attacks. It is highlight that our encryption scheme is a good explore in the area of multivariate cryptography. Finally, a straightforward Magma implementation confirms the efficient operation of the public key algorithms.
A Multivariate Public Key Cryptographic Scheme

Yuan Feng,Sun Ying,Jiang Jijun,Zhao Shangwei,Xu Shengwei

DOI: https://doi.org/10.1109/cc.2014.7019846

2014-01-01

Abstract:This paper presents a multivariate public key cryptographic scheme over a finite field with odd prime characteristic. The idea of embedding and layering is manifested in its construction. The security of the scheme is analyzed in detail, and this paper indicates that the scheme can withstand the up to date differential cryptanalysis. We give heuristic arguments to show that this scheme resists all known attacks.
Embedded Surface Attack on Multivariate Public Key Cryptosystems from Diophantine Equations.

Jintai Ding,Ai Ren,Chengdong Tao

DOI: https://doi.org/10.1007/978-3-642-38519-3_9

2012-01-01

Abstract:Let X = (x 1,.;x n ) and Y = (y 1,.;y m ) be a pair of corresponding plaintext and ciphertext for a cryptosystem. We define an embedded surface of this cryptosystem as any polynomial equation: which is satisfied by all such pairs. In this paper, we present a new attack on the multivariate public key cryptosystems from Diophantine equations developed by Gao and Heindl by using the embedded surfaces associated to this family of multivariate cryptosystems. © 2013 Springer-Verlag Berlin Heidelberg.
Probability Method for Cryptanalysis of General Multivariate Modular Linear Equation

HaiJian Zhou,Ping Luo,DaoShun Wang,YiQi Dai

DOI: https://doi.org/10.1007/s11432-009-0159-9

2009-01-01

Science in China Series F Information Sciences

Abstract:Finding the solution to a general multivariate modular linear equation plays an important role in cryptanalysis field. Earlier results show that obtaining a relatively short solution is possible in polynomial time. However, one problem arises here that if the equation has a short solution in given bounded range, the results outputted by earlier algorithms are often not the ones we are interested in. In this paper, we present a probability method based on lattice basis reduction to solve the problem. For a general multivariate modular linear equation with short solution in the given bounded range, the new method outputs this short solution in polynomial time, with a high probability. When the number of unknowns is not too large (smaller than 68), the probability is approximating 1. Experimental results show that Knapsack systems and Lu-Lee type systems are easily broken in polynomial time with this new method.
Analysis of Multivariate Encryption Schemes: Application to Dob and

Morten Øygarden,Patrick Felke,Håvard Raddum

DOI: https://doi.org/10.1007/s00145-024-09501-w

2024-04-20

Journal of Cryptology

Abstract:A common strategy for constructing multivariate encryption schemes is to use a central map that is easy to invert over an extension field, along with a small number of modifications to thwart potential attacks. In this work, we study the effectiveness of these modifications, by deriving estimates for the number of degree fall polynomials. After developing the necessary tools, we focus on encryption schemes using the and Dobbertin central maps, with the internal perturbation ( ip ), and modifications. For these constructions, we are able to accurately predict the number of degree fall polynomials produced in a Gröbner basis attack, up to and including degree 5 for the Dob encryption scheme and four for . The predictions remain accurate even when fixing variables. Based on this new theory, we design a novel attack on Dob, which completely recovers the secret key for the parameters suggested by its designers. Due to the generality of the presented techniques, we also believe that they are of interest to the analysis of other big-field schemes.

computer science, theory & methods,engineering, electrical & electronic,mathematics, applied
Breaking the Symmetry: a Way to Resist the New Differential Attack.

Jintai Ding,Bo-Yin Yang,Chen-Mou Cheng,Chia-Hsin Owen Chen,Vivien Dubois

2007-01-01

Abstract:sflash had recently been broken by Dubois, Stern, Shamir, etc., using a differential attack on the public key. The C∗− signature schemes are hence no longer practical. In this paper, we will study the new attack from the point view of symmetry, then (1) present a simple concept (projection) to modify several multivariate schemes to resist the new attacks; (2) demonstrate with practical examples that this simple method could work well; and (3) show that the same discussion of attack-and-defence applies to other big-field multivariates. The speed of encryption schemes is not affected, and we can still have a big-field multivariate signatures resisting the new differential attacks with speeds comparable to sflash.
Multivariate public key cryptography scheme with changeable ratio of ciphertext length to plaintext length

Hong XIANG,Siyao LI,Bin CAI

DOI: https://doi.org/10.11835/j.issn.1000-582X.2017.07.006

2017-01-01

Abstract:Multivariate public key cryptosystem is an important method to guarantee the security of communication after quantum computer appears.There are lots of practical multivariate signature schemes,but only a few multivariate encryption schemes show up.The simple matrix encryption scheme proposed by Tao,et al.is an efficient and secure multivariate encryption scheme in PQCrypto2013.However,the ratio of length of cipher text to plain text is always 2.Cubic AB encryption scheme is a way to fix it.It uses a very wide matrix to replace square matrixes (B and C),and the elements of matrix A are random quadratic polynomials.With this method,the ratio of length of cipher text to plain text could be changed easily.Besides,rank attack cannot be used to attack this scheme.At the same time,the length of cipher text and plain text will be shorter,which could make the process of decryption faster.
Quantum Differential and Linear Cryptanalysis

Marc Kaplan,Gaëtan Leurent,Anthony Leverrier,María Naya-Plasencia

DOI: https://doi.org/10.13154/tosc.v2016.i1.71-94

2017-03-07

Abstract:Quantum computers, that may become available one day, would impact many scientific fields, most notably cryptography since many asymmetric primitives are insecure against an adversary with quantum capabilities. Cryptographers are already anticipating this threat by proposing and studying a number of potentially quantum-safe alternatives for those primitives. On the other hand, symmetric primitives seem less vulnerable against quantum computing: the main known applicable result is Grover's algorithm that gives a quadratic speed-up for exhaustive search. In this work, we examine more closely the security of symmetric ciphers against quantum attacks. Since our trust in symmetric ciphers relies mostly on their ability to resist cryptanalysis techniques, we investigate quantum cryptanalysis techniques. More specifically, we consider quantum versions of differential and linear cryptanalysis. We show that it is usually possible to use quantum computations to obtain a quadratic speed-up for these attack techniques, but the situation must be nuanced: we don't get a quadratic speed-up for all variants of the attacks. This allows us to demonstrate the following non-intuitive result: the best attack in the classical world does not necessarily lead to the best quantum one. We give some examples of application on ciphers LAC and KLEIN. We also discuss the important difference between an adversary that can only perform quantum computations, and an adversary that can also make quantum queries to a keyed primitive.

Quantum Physics,Cryptography and Security
A new multivariate primitive from CCZ equivalence

Marco Calderini,Alessio Caminata,Irene Villa

2024-06-01

Abstract:Multivariate Cryptography is one of the main candidates for Post-quantum Cryptography. Multivariate schemes are usually constructed by applying two secret affine invertible transformations $\mathcal S,\mathcal T$ to a set of multivariate polynomials $\mathcal{F}$ (often quadratic). The secret polynomials $\mathcal{F}$ posses a trapdoor that allows the legitimate user to find a solution of the corresponding system, while the public polynomials $\mathcal G=\mathcal S\circ\mathcal F\circ\mathcal T$ look like random polynomials. The polynomials $\mathcal G$ and $\mathcal F$ are said to be affine equivalent. In this article, we present a more general way of constructing a multivariate scheme by considering the CCZ equivalence, which has been introduced and studied in the context of vectorial Boolean functions.

Cryptography and Security
Post-Quantum Cryptography, Second International Workshop, PQCrypto 2008, Cincinnati, OH, USA, October 17-19, 2008, Proceedings

PQCrypto,Johannes Buchmann,Jintai Ding

2008-01-01

Abstract:A New Efficient Threshold Ring Signature Scheme Based on Coding Theory.- Square-Vinegar Signature Scheme.- Attacking and Defending the McEliece Cryptosystem.- McEliece Cryptosystem Implementation: Theory and Practice.- Merkle Tree Traversal Revisited.- Explicit Hard Instances of the Shortest Vector Problem.- Practical-Sized Instances of Multivariate PKCs: Rainbow, TTS, and ?IC-Derivatives.- Digital Signatures Out of Second-Preimage Resistant Hash Functions.- Cryptanalysis of Rational Multivariate Public Key Cryptosystems.- Syndrome Based Collision Resistant Hashing.- Nonlinear Piece In Hand Perturbation Vector Method for Enhancing Security of Multivariate Public Key Cryptosystems.- On the Power of Quantum Encryption Keys.- Secure PRNGs from Specialized Polynomial Maps over Any .- MXL2: Solving Polynomial Equations over GF(2) Using an Improved Mutant Strategy.- Side Channels in the McEliece PKC.
Algebraic Attack on the MQQ Public Key Cryptosystem

Mohamed Saied Emam Mohamed,Jintai Ding,Johannes Buchmann,Fabian Werner

DOI: https://doi.org/10.1007/978-3-642-10433-6_26

2009-01-01

Abstract:In this paper, we present an efficient attack on the multivariate Quadratic Quasigroups (MQQ) public key cryptosystem. Our cryptanalysis breaks the MQQ cryptosystem by solving a system of multivariate quadratic polynomial equations using both the MutantXL algorithm and the F4 algorithm. We present the experimental results that show that MQQ systems is broken up to size n equal to 300. Based on these results we show also that MutantXL solves MQQ systems with much less memory than the F4 algorithm implemented in Magma.
Security Analysis of Discrete Logarithm Based Cryptosystems

Wang Yuzhu,Liao Xiaofeng

DOI: https://doi.org/10.1007/bf02831858

2006-01-01

Abstract:Discrete logarithm based cryptosystems have subtle problems that make the schemes vulnerable. This paper gives a comprehensive listing of security issues in the systems and analyzes three classes of attacks which are based on mathematical structure of the group which is used in the schemes, the disclosed information of the subgroup and implementation details respectively. The analysis will, in turn, allow us to motivate protocol design and implementation decisions.
Threshold Ring Signature Scheme Based on Multivariate Public Key Cryptosystems

Qiu-Ling GUO,Hong XIANG,Bin CAI,Jun SANG,Tao XIANG

DOI: https://doi.org/10.13868/j.cnki.jcr.000226

2018-01-01

Abstract:Multivariate public-key cryptosystems(MPKCs)are the main candidates of post-quantum cryptosystems. At present, most of multivariate encryption schemes have security problems, while there are many secure and efficient signature schemes. However, less researches are conducted on multivariate signature schemes such as threshold ring signature,blind signature,group signature,and so on. The ring signature scheme based on multivariate public key cryptosystems first proposed by Shangping Wang et al. in 2011 has high efficiency. Threshold ring signature scheme ensures at least t members of a group to sign a message without revealing the identity of the signers. In this study, by combining the characteristics of ring signature scheme proposed by Shangping Wang et al.,we propose a threshold ring signature scheme based on MPKCs. The scheme uses the idea of fair partition to split a ring into t disjoint sub-rings repeatedly and form an(n,t)-complete partitioning system. When signing,it needs to compute the signature of each sub-rings,then concatenate the signatures to form a ring-like mechanism. Our scheme is a threshold ring signature scheme for multivariate bipolar systems, which can resist the attacks of quantum computers. Analysis shows that,it satisfies the completeness and anonymity of threshold ring signatures. Furthermore, the new scheme is proven to achieve the unforgeability under known attacks against MPKCs.

Overview of Cryptanalysis Techniques in Multivariate Public Key Cryptography

Current State of Multivariate Cryptography.

Multivariate Public Key Cryptography

Cryptanalysis of Novel Extended Multivariate Public Key Cryptosystem

Multivariable Public Key Cryptosystems

Cryptanalysis of Rational Multivariate Public Key Cryptosystems

Cryptanalysis of a Multivariate Public Key Cryptosystem

Simple Matrix - A Multivariate Public Key Cryptosystem (mpkc) for Encryption

A new encryption scheme for multivariate quadratic systems.

A Multivariate Public Key Cryptographic Scheme

Embedded Surface Attack on Multivariate Public Key Cryptosystems from Diophantine Equations.

Probability Method for Cryptanalysis of General Multivariate Modular Linear Equation

Analysis of Multivariate Encryption Schemes: Application to Dob and

Breaking the Symmetry: a Way to Resist the New Differential Attack.

Multivariate public key cryptography scheme with changeable ratio of ciphertext length to plaintext length

Quantum Differential and Linear Cryptanalysis

A new multivariate primitive from CCZ equivalence

Post-Quantum Cryptography, Second International Workshop, PQCrypto 2008, Cincinnati, OH, USA, October 17-19, 2008, Proceedings

Algebraic Attack on the MQQ Public Key Cryptosystem

Security Analysis of Discrete Logarithm Based Cryptosystems

Threshold Ring Signature Scheme Based on Multivariate Public Key Cryptosystems