Algebraic Cryptanalysis of McEliece Variants with Compact Keys - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2010

Algebraic Cryptanalysis of McEliece Variants with Compact Keys

Résumé

In this paper we propose a new approach to investigate the security of the McEliece cryptosystem. We recall that this cryptosystem relies on the use of error-correcting codes. Since its invention thirty years ago, no efficient attack had been devised that managed to recover the private key. We prove that the private key of the cryptosystem satisfies a system of bi-homogeneous polynomial equations. This property is due to the particular class of codes considered which are alternant codes. We have used these highly structured algebraic equations to mount an efficient key-recovery attack against two recent variants of the McEliece cryptosystems that aim at reducing public key sizes. These two compact variants of McEliece managed to propose keys with less than 20,000 bits. To do so, they proposed to use quasi-cyclic or dyadic structures. An implementation of our algebraic attack in the computer algebra system MAGMA allows to find the secret-key in a negligible time (less than one second) for almost all the proposed challenges. For instance, a private key designed for a 256-bit security has been found in 0.06 seconds with about 2^17.8 operations.
Fichier principal
Vignette du fichier
Eurocrypt2010.pdf (132.69 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

inria-00596632 , version 1 (30-05-2011)

Identifiants

Citer

Jean-Charles Faugère, Ayoub Otmani, Ludovic Perret, Jean-Pierre Tillich. Algebraic Cryptanalysis of McEliece Variants with Compact Keys. Eurocrypt 2010 - 29th International Conference on Cryptology, May 2010, Monaco, Monaco. pp.279-298, ⟨10.1007/978-3-642-13190-5_14⟩. ⟨inria-00596632⟩
620 Consultations
267 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More