An efficient algorithm for decomposing multivariate polynomials and its applications to cryptography - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Journal of Symbolic Computation Année : 2009

An efficient algorithm for decomposing multivariate polynomials and its applications to cryptography

Jean-Charles Faugère
Ludovic Perret
  • Fonction : Auteur
  • PersonId : 935330
  • IdRef : 123278864

Résumé

In this paper, we present an efficient and general algorithm for decomposing multivariate polynomials of the same arbitrary degree. This problem, also known as the Functional Decomposition Problem (FDP), is classical in computer algebra. It is the first general method addressing the decomposition of multivariate polynomials (any degree, any number of polynomials). As a byproduct, our approach can be also used to recover an ideal $I$ from its kth power $I^{k}$. The complexity of the algorithm depends on the ratio between the number of variables ($n$) and the number of polynomials ($u$). For example, polynomials of degree four can be decomposed in $O(n^{12})$, when this ratio is smaller than $\frac{1}{2}$. This work was initially motivated by a cryptographic application, namely the cryptanalysis of $2R^{-}$ schemes. From a cryptographic point of view, the new algorithm is so efficient that the principle of two-round schemes, including $2R^{-}$ schemes, becomes useless. Besides, we believe that our algorithm is of independent interest.

Dates et versions

hal-01147177 , version 1 (29-04-2015)

Identifiants

Citer

Jean-Charles Faugère, Ludovic Perret. An efficient algorithm for decomposing multivariate polynomials and its applications to cryptography. Journal of Symbolic Computation, 2009, 44 (12), pp.1676--1689. ⟨10.1016/j.jsc.2008.02.005⟩. ⟨hal-01147177⟩
150 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More