Cryptanalysis of Multivariate and Odd-Characteristic HFE Variants - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

Cryptanalysis of Multivariate and Odd-Characteristic HFE Variants

Luk Bettale
  • Fonction : Auteur
  • PersonId : 966118
Jean-Charles Faugère
Ludovic Perret
  • Fonction : Auteur
  • PersonId : 935330
  • IdRef : 123278864

Résumé

We investigate the security of a generalization of HFE (multivariate and odd-characteristic variants). First, we propose an improved version of the basic Kipnis-Shamir key recovery attack against HFE. Second, we generalize the Kipnis-Shamir attack to Multi-HFE. The attack reduces to solve a MinRank problem directly on the public key. This leads to an improvement of a factor corresponding to the square of the degree of the extension field. We used recent results on MinRank to show that our attack is polynomial in the degree of the extension field. It appears that multi-HFE is less secure than original HFE for equal-sized keys. Finally, adaptations of our attack overcome several variants (i.e. minus modifier and embedding). As a proof of concept, we have practically broken the most conservative parameters given by Chen, Chen, Ding, Werner and Yang in 9 days for 256 bits security. All in all, our results give a more precise picture on the (in)security of several variants of HFE proposed these last years.

Dates et versions

hal-01287981 , version 1 (14-03-2016)

Identifiants

Citer

Luk Bettale, Jean-Charles Faugère, Ludovic Perret. Cryptanalysis of Multivariate and Odd-Characteristic HFE Variants. Public Key Cryptography - PKC 2011, Mar 2011, Taormina, Italy. pp.441-458, ⟨10.1007/978-3-642-19379-8_27⟩. ⟨hal-01287981⟩
272 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More