HFE and BDDs: A Practical Attempt at Cryptanalysis

Abstract : HFE (Hidden Field Equations) is a public key cryptosystem using univariate polynomials over finite fields. It was proposed by J. Patarin in 1996. Well chosen parameters during the construction produce a system of quadratic multivariate polynomials over GF(2) as the public key. An enclosed trapdoor is used to decrypt messages. We propose a ciphertext-only attack which mainly consists in satisfying a boolean formula. Our algorithm is based on BDDs (Binary Decision Diagrams), introduced by Bryant in 1986, which allow to represent and manipulate, possibly efficiently, boolean functions. This paper is devoted to some experimental results we obtained while trying to solve the Patarin's challenge. This approach was not successful, nevertheless it provided some interesting information about the security of HFE cryptosystem.
Keywords : cryptanalysis BDD HFE
Type de document :
Communication dans un congrès
Feng, Niedereiter, Xing. 2004, Birkhauser, pp.11, 2004
Liste complète des métadonnées

Contributeur : Jean-Baptiste Yunès <>
Soumis le : jeudi 22 juin 2006 - 17:40:13
Dernière modification le : mardi 5 février 2019 - 11:44:21


  • HAL Id : hal-00081338, version 1


Jean-Francis Michon, Pierre Valarcher, Jean-Baptiste Yunès. HFE and BDDs: A Practical Attempt at Cryptanalysis. Feng, Niedereiter, Xing. 2004, Birkhauser, pp.11, 2004. 〈hal-00081338〉



Consultations de la notice