Abstract:Multivariate public key cryptography is a candidate for post-quantum cryptography, and it allows generating particularly short signatures and fast verification. The Rainbow signature scheme proposed by Ding and Schmidt is such a multivariate cryptosystem, and it is considered secure against all known attacks. The Rainbow-Band-Separation attack recovers a secret key of Rainbow by solving certain systems of quadratic equations, and its complexity is estimated by the well-known theoretical value called the degree of regularity. However, the degree of regularity is generally larger than the solving degree in experiments, and an accurate estimation cannot be obtained. In this article, we propose a new theoretical value for the complexity of the Rainbow-Band-Separation attack using a Gröbner basis algorithm, which provides a more precise estimation compared to that using the degree of regularity. This theoretical value is deduced by the two-variable power series ∏ i = 1 m ( 1 − t 1 d i 1 t 2 d i 2 ) ( 1 − t 1 ) n 1 ( 1 − t 2 ) n 2 . Since the two-variable power series coincides with the one-variable power series at t 1 = t 2 deriving the degree of regularity, the theoretical value is less than or equal to the degree of regularity under a certain condition. Moreover, we show a relation between the Rainbow-Band-Separation attack using the hybrid approach and the HighRank attack. By considering this relation and our theoretical value, we obtain a new complexity estimation for the Rainbow-Band-Separation attack. Furthermore, applying our theoretical value to the complexity formula used in the NIST PQC 2nd round, we show that a slight modification of the proposed Rainbow parameter sets is required. Consequently, we provide a new theoretical value for generally estimating the solving degree of a bi-graded polynomial system, which can influence the parameter selection of Rainbow in the NIST PQC standardization project.

Breaking the power-of-two barrier: noise estimation for BGV in NTT-friendly rings

Ring Switching in BGV-Style Homomorphic Encryption

Integer syndrome decoding in the presence of noise

Accelerating BGV Bootstrapping for Large P Using Null Polynomials over $$\mathbb {Z}_{p^e}$$

Effects of noise on performance of Bernstein-Vazirani algorithm

Bounding Large-Scale Bell Inequalities

Bounding the conditional von-Neumann entropy for device independent cryptography and randomness extraction

A General-Purpose Number Theoretic Transform Algorithm for Compact RLWE Cryptoprocessors

Theoretical foundations of the “ x 2 mod N ” generator

An Efficient FHE Radix-2 Addition Algorithm in BGV Scheme

Private and Secure Post-Quantum Verifiable Random Function with NIZK Proof and Ring-LWE Encryption in Blockchain

Bilateral Gamma Approximation in Weiner Space

Flexible partial enlargement to accelerate gröbner basis computation over F2

Efficient Hardware Arithmetic for Inverted Binary Ring-LWE Based Post-Quantum Cryptography

Analysis of In-Place Randomized Bit-Flipping Decoders for the Design of LDPC and MDPC Code-Based Cryptosystems

Propagation properties of a non-linear mapping based on squaring in odd characteristic

New Complexity Estimation on the Rainbow-Band-Separation Attack

Improving Parameter Estimation of Entropic Uncertainty Relation in Continuous-Variable Quantum Key Distribution.

Near Threshold Computation of Partitioned Ring Learning With Error (RLWE) Post Quantum Cryptography on Reconfigurable Architecture

Fast polynomial arithmetic in homomorphic encryption with cyclo-multiquadratic fields

Lowering Connectivity Requirements For Bivariate Bicycle Codes Using Morphing Circuits