Efficient Key Recovery for All HFE Signature Variants

Chengdong Tao Ding Lab, Beijing Institute of Mathematical Science and Applications, Beijing, China Albrecht Petzoldt FAU Erlangen-Nuremberg, Nuremberg, Germany Jintai Ding Yau Mathematical Center, Tsinghua University, Beijing, China; Ding Lab, Beijing Institute of Mathematical Science and Applications, Beijing, China

TBD mathscidoc:2207.43095

CRYPTO 2021, 70–93, 2021.8
The HFE cryptosystem is one of the most popular multi- variate schemes. Especially in the area of digital signatures, the HFEv- variant offers short signatures and high performance. Recently, an instance of the HFEv- signature scheme called GeMSS was selected as one of the alternative candidates for signature schemes in the third round of the NIST Post-Quantum Crypto (PQC) Standardization Project. In this paper, we propose a new key recovery attack on the HFEv- signature scheme. Our attack shows that both the Minus and the Vinegar modification do not enhance the security of the basic HFE scheme significantly. This shows that it is very difficult to build a secure and efficient signature scheme on the basis of HFE. In particular, we use our attack to show that the proposed parameters of the GeMSS scheme are not as secure as claimed.
No keywords uploaded!
[ Download ] [ 2022-07-15 11:35:07 uploaded by dingjt ] [ 32 downloads ] [ 0 comments ]
@inproceedings{chengdong2021efficient,
  title={Efficient Key Recovery for All HFE Signature Variants},
  author={Chengdong Tao, Albrecht Petzoldt, and Jintai Ding},
  url={http://archive.ymsc.tsinghua.edu.cn/pacm_paperurl/20220715113507674665675},
  booktitle={CRYPTO 2021},
  pages={70–93},
  year={2021},
}
Chengdong Tao, Albrecht Petzoldt, and Jintai Ding. Efficient Key Recovery for All HFE Signature Variants. 2021. In CRYPTO 2021. pp.70–93. http://archive.ymsc.tsinghua.edu.cn/pacm_paperurl/20220715113507674665675.
Please log in for comment!
 
 
Contact us: office-iccm@tsinghua.edu.cn | Copyright Reserved