HFE Key Recovery Experimental Results conclusion

Charles Bouillaguet1

Description

HFE Key-Recovery Experimental Results conclusion A Family of Weak Keys in HFE (and the Corresponding Practical Key-Recovery) Charles Bouillaguet1 Antoine Joux2,3 Pierre-Alain Fouque1 Joana Treger3 1Ecole Normale Supérieure, Paris, France 2Direction Générale de l'Armement, 3Université de Versailles-Saint Quentin, France SCC 2010, Egham, UK

• most well-known


• fqn ?


• hfe key-recovery


• decryption ? invert


• sub-exponential algorithm


• multivariate encryption


• solving multivariate polynomial


• direction générale de l'armement

Sujets

• Direction générale de l'Armement

Informations

• Publié par: pefav
• Nombre de lectures: 21
• Langue: English

Extrait

FHEeK-yeRocevyrxEpremineatleRustls AFamilyofWeakKeysinHFE (andtheCorrespondingPracticalKey-Recovery) CharlesBouillaguet 1 AntoineJoux 2,3 Pierre-AlainFouque 1 JoanaTreger 3 1 EcoleNormaleSupérieure,Paris,France 2 DirectionGénéraledel’Armement, 3 UniversitédeVersailles-SaintQuentin,France SCC2010,Egham,UK occnulisno

FHEeK-yeRocevyrxEp MultivariateCryptographyinOneSlide remineatleRustls SecretKey 1 F :( F q ) n → ( F q ) n =( f 1 ( x 1 ,..., x n ),..., f n ( x 1 ,..., x n )) I easilyinvertiblecollectionofnpolynomialsinnvariables. 2 SandTtwoinvertiblen × nmatricesover F q PublicKey KPKPPK=T ◦ F ◦ S=( 1 (x 1 ,...,x n ),..., n (x 1 ,...,x n → random-lookingmultivariatequadraticpolynomials. Howdoesitwork? I (Public)Encryptionofx→evaluatec = PK ( x ) . I (Secret)Decryption→invertTthenFthenS. )) occnulisno