Hidden Polynomial(s) Cryptosystems

Ilia Toli

DOI: https://doi.org/10.48550/arXiv.cs/0304013

2003-04-09

Cryptography and Security

Abstract:We propose public-key cryptosystems with public key a system of polynomial equations, algebraic or differential, and private key a single polynomial or a small-size ideal. We set up probabilistic encryption, signature, and signcryption protocols.

What problem does this paper attempt to address?

Lattice-based PKEs/KEMs

Xianhui Lu,Jiang Zhang

DOI: https://doi.org/10.1093/nsr/nwab090

IF: 20.6

2021-05-24

National Science Review

Abstract:The invention of public-key cryptography (PKC) by Diffie and Hellman in 1976 is one of two milestones marking the beginning of modern cryptography. The security of a PKC system requires that it should be infeasible to compute the private key from a given public key, which in turn is typically guaranteed by the difficulty in solving some cryptographic-friendly mathematical problems. Among those problems, the integer factorization and discrete logarithm problems play pivotal roles in the development of public-key cryptography. In particular, the assumption that there is no polynomial time (classical) algorithm that solves the above two problems constitutes the basis for the security of almost all currently used public-key cryptosystems, such as RSA and ElGamal. However, Shor [1] found an efficient quantum solving algorithm for the integer factorization and discrete logarithm problems in 1994, which would destroy the security basis for most real deployed PKC systems if large-scale quantum computers become available. The rapid development of quantum technology in recent years suggests that we are getting closer to the quantum crisis of current PKC systems.

multidisciplinary sciences
Breaking the Hidden Irreducible Polynomials Scheme

Christian Eder

DOI: https://doi.org/10.48550/arXiv.1911.01830

2019-11-05

Abstract:In 2019 Gómez described a new public key cryptography scheme based on ideas from multivariate public key cryptography using hidden irreducible polynomials. We show that the scheme's design has a flaw which lets an attacker recover the private key directly from the public key.

Cryptography and Security
A New Symmetric Homomorphic Functional Encryption over a Hidden Ring for Polynomial Public Key Encapsulations

Randy Kuang,Maria Perepechaenko,Ryan Toth

DOI: https://doi.org/10.48550/arXiv.2301.11995

2023-01-27

Cryptography and Security

Abstract:This paper proposes a new homomorphic functional encryption using modular multiplications over a hidden ring. Unlike traditional homomorphic encryption where users can only passively perform ciphertext addition or multiplication, the homomorphic functional encryption retains homomorphic addition and scalar multiplication properties, but also allows for the user's inputs through polynomial variables. The proposed homomorphic encryption can be applied to any polynomials over a finite field, with their coefficients considered as their privacy. We denote the polynomials before homomorphic encryption as plain polynomials and after homomorphic encryption as cipher polynomials. A cipher polynomial can be evaluated with variables from the finite field, GF(p), by calculating the monomials of variables modulo a prime p. These properties allow functional homomorphic encryption to be used for public key encryption of certain asymmetric cryptosystems to hide the structure of its central map construction. We propose a new variant of MPKC with homomorphic encryption of its public key. We propose to use a single plaintext vector and a noise vector of multiple variables to be associated with the central map, in place of the secret plaintext vector to be encrypted in MPKC. We call this variant of encrypted MPKC, a Homomorphic Polynomial Public Key algorithm or HPPK algorithm. The HPPK algorithm holds the property of indistinguishability under the chosen-plaintext attacks or IND-CPA. The overall classical complexity to crack the HPPK algorithm is exponential in the size of the prime field GF(p). We briefly report on benchmarking performance results using the SUPERCOP toolkit. Benchmarking results demonstrate that HPPK offers rather fast performance, which is comparable and in some cases outperforms the NIST PQC finalists for key generation, encryption, and decryption.
Hidden Cosets and Applications to Unclonable Cryptography

Andrea Coladangelo,Jiahui Liu,Qipeng Liu,Mark Zhandry

DOI: https://doi.org/10.48550/arXiv.2107.05692

2022-07-15

Abstract:In this work, we study a generalization of hidden subspace states to hidden coset states (first introduced by Aaronson and Christiano [STOC '12]). This notion was considered independently by Vidick and Zhang [Eurocrypt '21], in the context of proofs of quantum knowledge from quantum money schemes. We explore unclonable properties of coset states and several applications: - We show that assuming indistinguishability obfuscation (iO), hidden coset states possess a certain direct product hardness property, which immediately implies a tokenized signature scheme in the plain model. Previously, it was known only relative to an oracle, from a work of Ben-David and Sattath [QCrypt '17]. - Combining a tokenized signature scheme with extractable witness encryption, we give a construction of an unclonable decryption scheme in the plain model. The latter primitive was recently proposed by Georgiou and Zhandry [ePrint '20], who gave a construction relative to a classical oracle. - We conjecture that coset states satisfy a certain natural (information-theoretic) monogamy-of-entanglement property. Assuming this conjecture is true, we remove the requirement for extractable witness encryption in our unclonable decryption construction, by relying instead on compute-and-compare obfuscation for the class of unpredictable distributions. This conjecture was later proved by Culf and Vidick in a follow-up work. - Finally, we give a construction of a copy-protection scheme for pseudorandom functions (PRFs) in the plain model. Our scheme is secure either assuming iO, OWF, and extractable witness encryption, or assuming iO, OWF, compute-and-compare obfuscation for the class of unpredictable distributions, and the conjectured monogamy property mentioned above. This is the first example of a copy-protection scheme with provable security in the plain model for a class of functions that is not evasive.

Cryptography and Security,Quantum Physics
Multivariable Public Key Cryptosystems

Jintai Ding,Dieter Schmidt

DOI: https://doi.org/10.1007/978-1-0716-0987-3

2020-01-01

Abstract:Although RSA is a very successful public key cryptosystem, efforts are under way to find alternative systems, which are computationally more efficient, and which would remain secure even when a big enough quantum computer becomes operational. Multivariable polynomials over a finite field have been used to build new public key cryptosystems. Some of these constructions are not as secure as was claimed initially, but others are still viable. The paper gives on overview over this field and discusses the status of many systems, which have been proposed in the last 20 years.
Public key encryption algorithm based on Chebyshev polynomials over finite fields

HongZhou Ning,Yun Liu,Dequan He

DOI: https://doi.org/10.1109/ICOSP.2006.345958

2007-01-01

Abstract:By expanding the definition of Chebyshev polynomials, the Chebyshev polynomials over finite field FP are formed. After analyzing the system of Chebyshev polynomials over finite field FP, this paper presents that the system is a divergent system and all curves of T n(x) at n>1 are pseudo-random sequences when P is enough large. For the pseudo-random property and expand of definition of Chebyshev polynomials, Tn(x) is a good one-way function over FP. Using one-way and semi-group properties, a novel public key encryption algorithm is presented. The running of the algorithm doesn't need large prime numbers and primitive elements, but integer number. © 2006 IEEE.
Polar codes for secret sharing

Mohsen Moradi

DOI: https://doi.org/10.48550/arXiv.1705.03042

2017-05-08

Cryptography and Security

Abstract:A secret can be an encrypted message or a private key to decrypt the ciphertext. One of the main issues in cryptography is keeping this secret safe. Entrusting secret to one person or saving it in a computer can conclude betrayal of the person or destruction of that device. For solving this issue, secret sharing can be used between some individuals which a coalition of a specific number of them can only get access to the secret. In practical issues, some of the members have more power and by a coalition of fewer of them, they should know about the secret. In a bank, for example, president and deputy can have a union with two members by each other. In this paper, by using Polar codes secret sharing has been studied and a secret sharing scheme based on Polar codes has been introduced. Information needed for any member would be sent by the channel which Polar codes are constructed by it.
Distributed Algorithms that Solve Boolean Equations with Local and Differential Privacies

Hongsheng Qi,Bo Li,Rui-Juan Jing,Lei Wang,Alexandre Proutière,Guodong Shi

2020-01-01

Abstract:In this paper, we propose distributed algorithms that solve a system of Boolean equations over a network, where each node in the network possesses only one Boolean equation from the system. The Boolean equation assigned at any particular node is a {\em private} equation known to this node only, and the nodes aim to compute the exact set of solutions to the system without exchanging their local equations. We show that each private Boolean equation can be locally lifted to a linear algebraic equation under a basis of Boolean vectors, leading to a network linear equation that is distributedly solvable using existing distributed linear equation algorithms as a subroutine. A number of exact or approximate solutions to the induced linear equation are then computed at each node from different initial values. The solutions to the original Boolean equations are eventually computed locally via a Boolean vector search algorithm. We prove that given solvable Boolean equations, when the initial values of the nodes for the distributed linear equation solving step are i.i.d selected according to a uniform distribution in a high-dimensional cube, our algorithms return the exact solution set of the Boolean equations at each node with high probability. Furthermore, we present an algorithm for distributed verification of the satisfiability of Boolean equations, and prove its correctness. Finally, we show that by utilizing linear equation solvers with differential privacy to replace the in-network computing routines, the overall distributed Boolean equation algorithms can be made differentially private. Under the standard Laplace mechanism, we prove an explicit level of noises that can be injected in the linear equation steps for ensuring a prescribed level of differential privacy.
Public-Key Cryptosystem Based on the Discrete Logarithm Problem.

Lein Harn,Shoubao Yang

DOI: https://doi.org/10.1007/3-540-57220-1_85

1992-01-01

Abstract:In 1985, T. ElGamal proposed a public-key cryptosystem and a signature scheme, in which the difficulty of breaking the system is based on the difficulty of computing a discrete logarithm in a finite group. For the same security level, the size of the ciphertext and the computational time of ElGamal's encryption are double those of the wellknown RSA scheme. In this paper, we propose a public-key cryptosystem based on the discrete logarithm, in which the size of the ciphertext and the computational time are the same as those of the RSA scheme, and the security level is the same as the ElGamal cryptosystem.
Homomorphic Polynomial Public Key Cryptography for Quantum-secure Digital Signature

Randy Kuang,Maria Perepechaenko,Mahmoud Sayed,Dafu Lou

2024-06-06

Abstract:In their 2022 study, Kuang et al. introduced Multivariable Polynomial Public Key (MPPK) cryptography, leveraging the inversion relationship between multiplication and division for quantum-safe public key systems. They extended MPPK into Homomorphic Polynomial Public Key (HPPK), employing homomorphic encryption for large hidden ring operations. Originally designed for key encapsulation (KEM), HPPK's security relies on homomorphic encryption of public polynomials. This paper expands HPPK KEM to a digital signature scheme, facing challenges due to the distinct nature of verification compared to decryption. To adapt HPPK KEM to digital signatures, the authors introduce an extension of the Barrett reduction algorithm, transforming modular multiplications into divisions in the verification equation over a prime field. The extended algorithm non-linearly embeds the signature into public polynomial coefficients, addressing vulnerabilities in earlier MPPK DS schemes. Security analysis demonstrates exponential complexity for private key recovery and forged signature attacks, considering ring bit length twice that of the prime field size.

Cryptography and Security
A SAT-based Public Key Cryptography Scheme

Sebastian E. Schmittner

DOI: https://doi.org/10.48550/arXiv.1507.08094

2015-07-29

Cryptography and Security

Abstract:A homomorphic public key crypto-scheme based on the Boolean Satisfiability Problem is proposed. The public key is a SAT formula satisfied by the private key. Probabilistic encryption generates functions implied to be false by the public key XOR the message bits. A zero-knowledge proof is used to provide signatures.
A novel reversible data hiding in encrypted images based on polynomial arithmetic

Lin Chen,Jianzhu Lu,Junguang Huang,Huiping Hu,Jiali Peng

DOI: https://doi.org/10.48550/arXiv.2108.04040

2021-08-09

Cryptography and Security

Abstract:Reversible data hiding in encrypted images is an effective technology for data hiding and protecting image privacy. Although there are many high-capacity methods have been presented in recent year, most of them need a pre-processing phase to reserve room in the original image before encryption. It may be unpractical, because the image provider has to analyze the content of the image and accomplish additional operations. In this paper, we propose a new robust vacate room after encryption schema based on polynomial arithmetic, which achieves a high embedding capacity with the perfect recovery of the original image. An efficient symmetric encryption method is applied to protect the privacy of the original image. One polynomial is generated by the encryption key and a group of the encrypted pixel, and the secret data is mapped into another polynomial. Through the arithmetic of these two polynomials, we can extract secret data and recover origin image, separately. Experimental results demonstrate that our solution has a stable and good performance on various images (include rough texture image). Compared with some typical methods, the proposed method can get better decrypted image quality with a large embedding capacity.
Decrypting Nonlinearity: Koopman Interpretation and Analysis of Cryptosystems

Robin Strässer,Sebastian Schlor,Frank Allgöwer

2024-07-08

Abstract:Public-key cryptosystems rely on computationally difficult problems for security, traditionally analyzed using number theory methods. In this paper, we introduce a novel perspective on cryptosystems by viewing the Diffie-Hellman key exchange and the Rivest-Shamir-Adleman cryptosystem as nonlinear dynamical systems. By applying Koopman theory, we transform these dynamical systems into higher-dimensional spaces and analytically derive equivalent purely linear systems. This formulation allows us to reconstruct the secret integers of the cryptosystems through straightforward manipulations, leveraging the tools available for linear systems analysis. Additionally, we establish an upper bound on the minimum lifting dimension required to achieve perfect accuracy. Our results on the required lifting dimension are in line with the intractability of brute-force attacks. To showcase the potential of our approach, we establish connections between our findings and existing results on algorithmic complexity. Furthermore, we extend this methodology to a data-driven context, where the Koopman representation is learned from data samples of the cryptosystems.

Systems and Control,Cryptography and Security,Dynamical Systems
Structured ramp secret sharing schemata over rings of real polynomials

Gerasimos C. Meletiou,Nikolaos K. Papadakis,Dimitrios S. Triantafyllou,Michael N. Vrahatis

DOI: https://doi.org/10.1016/j.apnum.2024.06.003

IF: 2.994

2024-06-09

Applied Numerical Mathematics

Abstract:Two new ramp secret sharing schemata based on polynomials are proposed. For both schemata, the secret is considered to be a polynomial created by the dealer. The participants are separated into l⩾2 , groups, that are specified by the dealer's levels Li for i=1,2,...,l and each level Li , i⩾2 , is separated into subsets. The shares of the secret are given to participants in the form of polynomials. For the first proposed scheme, the dealer creates l polynomials one for each level. Specific participants from every subset of each level have to cooperate all together in order to construct the polynomial of their level. Next all the authorized participants cooperate for computing the greatest common divisor of the polynomials in order to retrieve the secret. In the second scheme, the authorized participants cooperate per two levels using a bottom-up procedure. In both schemata the greatest common divisor can be evaluated by implementing numerical linear algebra methods, and precisely factorization of matrices of special form such as Sylvester matrices. The triangularization of these matrices can be obtained by exploiting their special structure for the reduction of the required floating point operations. The innovative idea of the paper at hand is the use of real polynomials in secret sharing schemata. This is particularly useful since the greatest common divisor can always be computed with efficient accuracy using effective numerical methods. New theoretical results are proved and provided that support the error analysis of our approach.

mathematics, applied
VESPo: Verified Evaluation of Secret Polynomials

Jean-Guillaume Dumas,Aude Maignan,Clément Pernet,Daniel S. Roche

DOI: https://doi.org/10.48550/arXiv.2110.02022

2023-03-13

Abstract:Proofs of Retrievability are protocols which allow a Client to store data remotely and to efficiently ensure, via audits, that the entirety of that data is still intact. Dynamic Proofs of Retrievability (DPoR) also support efficient retrieval and update of any small portion of the <a class="link-external link-http" href="http://data.We" rel="external noopener nofollow">this http URL</a> propose a novel protocol for arbitrary outsourced data storage that achieves both low remote storage size and audit complexity.A key ingredient, that can be also of intrinsic interest, reduces to efficiently evaluating a secret polynomial at given public points, when the (encrypted) polynomial is stored on an untrusted <a class="link-external link-http" href="http://Server.The" rel="external noopener nofollow">this http URL</a> Server performs the evaluations and also returns associated certificates. A Client can check that the evaluations are correct using the certificates and some pre-computed keys, more efficiently than re-evaluating the <a class="link-external link-http" href="http://polynomial.Our" rel="external noopener nofollow">this http URL</a> protocols support two important features: the polynomial itself can be encrypted on the Server, and it can be dynamically updated by changing individual coefficients cheaply without redoing the entire <a class="link-external link-http" href="http://setup.Our" rel="external noopener nofollow">this http URL</a> methods rely on linearly homomorphic encryption and pairings, and our implementation shows good performance for polynomial evaluations with millions of coefficients, and efficient DPoR with terabytes of <a class="link-external link-http" href="http://data.For" rel="external noopener nofollow">this http URL</a> instance, for a 1TB database, compared to the state of art, we can reduce the Client storage by 5000x, communication size by 20x, and client-side audit time by 2x, at the cost of one order of magnitude increase in server-side audit time.

Cryptography and Security,Symbolic Computation
Last fall degree of semi-local polynomial systems

Ming-Deh A. Huang

2023-11-06

Abstract:We study the last fall degrees of {\em semi-local} polynomial systems, and the computational complexity of solving such systems for closed-point and rational-point solutions, where the systems are defined over a finite field. A semi-local polynomial system specifies an algebraic set which is the image of a global linear transformation of a direct product of local affine algebraic sets. As a special but interesting case, polynomial systems that arise from Weil restriction of algebraic sets in an affine space of low dimension are semi-local. Such systems have received considerable attention due to their application in cryptography. Our main results bound the last fall degree of a semi-local polynomial system in terms of the number of closed point solutions, and yield an efficient algorithm for finding all rational-point solutions when the prime characteristic of the finite field and the number of rational solutions are small. Our results on solving semi-local systems imply an improvement on a previously known polynomial-time attack on the HFE (Hidden Field Equations) cryptosystems. The attacks implied in our results extend to public key encryption functions which are based on semi-local systems where either the number of closed point solutions is small, or the characteristic of the field is small. It remains plausible to construct public key cryptosystems based on semi-local systems over a finite field of large prime characteristic with exponential number of closed point solutions. Such a method is presented in the paper, followed by further cryptanalysis involving the isomorphism of polynomials (IP) problem, as well as a concrete public key encryption scheme which is secure against all the attacks discussed in this paper.

Computational Complexity,Number Theory
Counting Solutions to Discrete Non-Algebraic Equations Modulo Prime Powers

Abigail Mann

DOI: https://doi.org/10.48550/arXiv.1608.05882

2016-08-21

Abstract:As society becomes more reliant on computers, cryptographic security becomes increasingly important. Current encryption schemes include the ElGamal signature scheme, which depends on the complexity of the discrete logarithm problem. It is thought that the functions that such schemes use have inverses that are computationally intractable. In relation to this, we are interested in counting the solutions to a generalization of the discrete logarithm problem modulo a prime power. This is achieved by interpolating to p-adic functions, and using Hensel's lemma, or other methods in the case of singular lifting, and the Chinese Remainder Theorem.

Number Theory,Cryptography and Security
Hidden Stabilizers, the Isogeny To Endomorphism Ring Problem and the Cryptanalysis of pSIDH

Mingjie Chen,Muhammad Imran,Gábor Ivanyos,Péter Kutas,Antonin Leroux,Christophe Petit

2023-05-31

Abstract:The Isogeny to Endomorphism Ring Problem (IsERP) asks to compute the endomorphism ring of the codomain of an isogeny between supersingular curves in characteristic $p$ given only a representation for this isogeny, i.e. some data and an algorithm to evaluate this isogeny on any torsion point. This problem plays a central role in isogeny-based cryptography; it underlies the security of pSIDH protocol (ASIACRYPT 2022) and it is at the heart of the recent attacks that broke the SIDH key exchange. Prior to this work, no efficient algorithm was known to solve IsERP for a generic isogeny degree, the hardest case seemingly when the degree is prime. In this paper, we introduce a new quantum polynomial-time algorithm to solve IsERP for isogenies whose degrees are odd and have $O(\log\log p)$ many prime factors. As main technical tools, our algorithm uses a quantum algorithm for computing hidden Borel subgroups, a group action on supersingular isogenies from EUROCRYPT 2021, various algorithms for the Deuring correspondence and a new algorithm to lift arbitrary quaternion order elements modulo an odd integer $N$ with $O(\log\log p)$ many prime factors to powersmooth elements. As a main consequence for cryptography, we obtain a quantum polynomial-time key recovery attack on pSIDH. The technical tools we use may also be of independent interest.

Cryptography and Security,Quantum Physics
OliVier: an Oil and Vinegar based cryptosystem

Antonio Corbo Esposito,Rosa Fera,Francesco Romeo

2024-05-14

Abstract:In this paper, we present OliVier a new Public Key Exchange cryptosystem that is based on a multivariate quadratic polynomial system: Oil & Vinegar polynomials together with fully quadratic ones. We describe its designing process, usage, complexity

Commutative Algebra
Knapsack cryptosystems built on NP-hard instance

Laurent Evain

DOI: https://doi.org/10.48550/arXiv.0803.0845

2008-03-06

Abstract:We construct three public key knapsack cryptosystems. Standard knapsack cryptosystems hide easy instances of the knapsack problem and have been broken. The systems considered in the article face this problem: They hide a random (possibly hard) instance of the knapsack problem. We provide both complexity results (size of the key, time needed to encypher/decypher...) and experimental results. Security results are given for the second cryptosystem (the fastest one and the one with the shortest key). Probabilistic polynomial reductions show that finding the private key is as difficult as factorizing a product of two primes. We also consider heuristic attacks. First, the density of the cryptosystem can be chosen arbitrarily close to one, discarding low density attacks. Finally, we consider explicit heuristic attacks based on the LLL algorithm and we prove that with respect to these attacks, the public key is as secure as a random key.

Cryptography and Security,Computational Complexity,Discrete Mathematics,Data Structures and Algorithms

Hidden Polynomial(s) Cryptosystems

Lattice-based PKEs/KEMs

Breaking the Hidden Irreducible Polynomials Scheme

A New Symmetric Homomorphic Functional Encryption over a Hidden Ring for Polynomial Public Key Encapsulations

Hidden Cosets and Applications to Unclonable Cryptography

Multivariable Public Key Cryptosystems

Public key encryption algorithm based on Chebyshev polynomials over finite fields

Polar codes for secret sharing

Distributed Algorithms that Solve Boolean Equations with Local and Differential Privacies

Public-Key Cryptosystem Based on the Discrete Logarithm Problem.

Homomorphic Polynomial Public Key Cryptography for Quantum-secure Digital Signature

A SAT-based Public Key Cryptography Scheme

A novel reversible data hiding in encrypted images based on polynomial arithmetic

Decrypting Nonlinearity: Koopman Interpretation and Analysis of Cryptosystems

Structured ramp secret sharing schemata over rings of real polynomials

VESPo: Verified Evaluation of Secret Polynomials

Last fall degree of semi-local polynomial systems

Counting Solutions to Discrete Non-Algebraic Equations Modulo Prime Powers

Hidden Stabilizers, the Isogeny To Endomorphism Ring Problem and the Cryptanalysis of pSIDH

OliVier: an Oil and Vinegar based cryptosystem

Knapsack cryptosystems built on NP-hard instance