In this paper, we show the claims in the original Kipnis-Shamir attack on the HFE cryptosystems and the improved attack by Courtois that the complexity of the attacks is polynomial in terms of the number of variables are invalid. We present computer experiments and a theoretical argument using basic algebraic geometry to explain why it is so. Furthermore we show that even with the help of the powerful new Gröbner basis algorithm like F_4, the Kipnis-Shamir attack still should be exponential but not polynomial. This again is supported by our theoretical argument.

"A sequence $S$ is potentially $K_4-e$ graphical if it has a realization containing a $K_4-e$ as a subgraph. Let $\sigma(K_4-e,n)$ denote the smallest degree sum such that every $n$ -term graphical sequence $S$ with $\sigma(S)\geq\sigma(K_4-e,n)$ is potentially $K_4-e$ graphical. Gould, Jacobson, Lehel raised the problem of determining the value of $\sigma(K_4-e,n)$ . In this paper, we prove that $\sigma(K_4-e,n)=2[(3n-1)/2]$ for $n\geq7$ and $n=4,5$ , and $\sigma(K_4-e,6)=20$ .''

The non-Gaussian maximum likelihood estimator is frequently used in GARCH models with the intention of capturing heavy-tailed returns. However, unless the parametric likelihood family contains the true likelihood, the estimator is inconsistent due to density misspecification. To correct this bias, we identify an unknown scale parameter _<i>f</i> that is critical to the identification for consistency and propose a three-step quasi-maximum likelihood procedure with non-Gaussian likelihood functions. This novel approach is consistent and asymptotically normal under weak moment conditions. Moreover, it achieves better efficiency than the Gaussian alternative, particularly when the innovation error has heavy tails. We also summarize and compare the values of the scale parameter and the asymptotic efficiency for estimators based on different choices of likelihood functions with an increasing level of heaviness in the

We review some recent developments in Chern-Simons theory on a hyperbolic 3-manifold M with complex gauge group G. We focus on the case G=SL(N,C) and with M a knot complement. The main result presented in this note is the cluster partition function, a computational tool that uses cluster algebra techniques to evaluate the Chern-Simons path integral. We also review various applications and open questions regarding the cluster partition function and some of its relation with string theory.

In this paper, we first present a theoretical analysis model on the Proof-of-Work (PoW) for cryptocurrency blockchain. Based on this analysis, we present a new type of PoW, which relies on the hardness of solving a set of random quadratic equations over the finite field GF(2). We will present the advantages of such a PoW, in particular, in terms of its impact on decentralization and the incentives involved, and therefore demonstrate that this is a new good alternative as a new type for PoW in blockchain applications.

In 2017, Ward Beullens et al. submitted Lifted Unbalanced Oil and Vinegar [3], which is a modification to the Unbalanced Oil and Vinegar Scheme by Patarin. Previously, Ding et al. proposed the Subfield Differential Attack [22] which prompted a change of parameters by the authors of LUOV for the second round of the NIST post quantum standardization competition [4]. In this paper we propose a modification to the Subfield Differential Attack called the Nested Subset Differential Attack which fully breaks half of the parameter sets put forward. We also show by experimentation that this attack is practically possible to do in under 210 min for the level I security parameters and not just a theoretical attack. The Nested Subset Differential attack is a large improvement of the Subfield differential attack which can be used in real world circumstances. Moreover, we will only use what is called the “lifted” structure of LUOV, and our attack can be thought as a development of solving “lifted” quadratic systems.

We analyze two-dimensional Schrdinger operators with the potential |{xy}{|}^{p}-\lambda {({x}^{2}+{y}^{2})}^{p/(p+ 2)} where |{xy}{|}^{p}-\lambda {({x}^{2}+{y}^{2})}^{p/(p+ 2)} and |{xy}{|}^{p}-\lambda {({x}^{2}+{y}^{2})}^{p/(p+ 2)} which exhibit an abrupt change of spectral properties at a critical value of the coupling constant . We show that in the supercritical case the spectrum covers the whole real axis. In contrast, for below the critical value the spectrum is purely discrete and we establish a LiebThirring-type bound on its moments. In the critical case where the essential spectrum covers the positive halfline while the negative spectrum can only be discrete, we demonstrate numerically the existence of a ground-state eigenvalue.

Degree theory has been developed as a tool for checking the solution existence of nonlinear equations. In his classic paper published in 1983, Browder developed a degree theory for mappings of monotone type f+ T, where f is a mapping of class (S)+ from a bounded open set in a reflexive Banach space X into its dual X, and T is a maximal monotone mapping from X into X. This breakthrough paved the way for many applications of degree theoretic techniques to several large classes of nonlinear partial differential equations. In this paper we continue to develop the results of Browder on the degree theory for mappings of monotone type f+ T. By enlarging the class of maximal monotone mappings and pseudo-monotone homotopies we obtain some new results of the degree theory for such mappings.

Some electromagnetic materials exhibit, in a given frequency range, effective dielectric permittivity and/or magnetic permeability which are negative. In the literature, they are called negative index materials, left-handed materials or meta-materials. We propose in this paper a numerical method to solve a wave transmission between a classical dielectric material and a meta-material. The method we investigate can be considered as an alternative method compared to the method presented by the second author and co-workers. In particular, we shall use the abstract framework they developed to prove well-posedness of the exact problem. We recast this problem to fit later discretization by the staggered discontinuous Galerkin method developed by the first author and co-worker, a method which relies on introducing an auxiliary unknown. Convergence of the numerical method is proven, with the help of explicit infsup

No abstract uploaded!

The BMS (Bondi-van der Burg-Metzner-Sachs) symmetry arises as the asymptotic symmetry of flat spacetime at null infinity. In particular, the BMS algebra for three dimensional flat spacetime (BMS3) is generated by the super-rotation generators which form a Virasoro sub-algebra with central charge cL, together with mutually-commuting super-translation generators. The super-rotation and super-translation generators have non-trivial commutation relations with another central charge cM. In this paper, we study a free scalar theory in two dimensions exhibiting BMS3 symmetry, which can also be understood as the ultra-relativistic limit of a free scalar CFT2. Upon canonical quantization on the highest weight vacuum, the central charges are found to be cL=2 and cM=0. Because of the vanishing central charge cM=0, the theory features novel properties: there exist primary states which form a multiplet, and the Hilbert space can be organized by an enlarged version of BMS modules dubbed the staggered modules. We further calculate correlation functions and the torus partition function, the later of which is also shown explicitly to be modular invariant.

Suppose that we have n observations from the convolution model Y = X+, where X and are the independent unobservable random variables, and is measurement error with a known distribution. We will discuss the asymptotic normality for deconvolving kernel density estimators of the unknown density f_{X}(.) of X by assuming either the tail of the characteristic function of behaves as f_{X}(.) (which is called supersmooth error), or the tail of the characteristic function is of order f_{X}(.) (called ordinary smooth error). Asymptotic normality of estimating the functional f_{X}(.) is also addressed.

No abstract uploaded!

The SFLASH signature scheme stood for a decade as the most successful cryptosystem based on multivariate polynomials, before an efficient attack was finally found in 2007. In this paper, we review its recent cryptanalysis and we notice that its weaknesses can all be linked to the fact that the cryptosystem is built on the structure of a large field. As the attack demonstrates, this richer structure can be accessed by an attacker by using the specific symmetry of the core function being used. Then, we investigate the effect of restricting this large field to a purely linear subset and we find that the symmetries exploited by the attack are no longer present. At a purely defensive level, this defines a countermeasure which can be used at a moderate overhead. On the theoretical side, this informs us of limitations of the recent attack and raises interesting remarks about the design itself of multivariate schemes.

We give exact formulas for the growth of the ideal Aλ for λ a quadratic element of the algebra of Boolean functions over the Galois field GF(2). That is, we calculate dim A_k λ where A_k is the subspace of elements of degree less than or equal to k. These results clarify some of the assertions made in the article of Yang, Chen and Courtois [22,23] concerning the efficiency of the XL algorithm.

Let A be an operator ideal on LCSs. A continuous seminorm p of a LCS X is said to be Acontinuous if Qp Ainj (X, Xp), where Xp is the completion of the normed space Xp= X/p 1 (0) and Qp is the canonical map. p is said to be a Groth (A)seminorm if there is a continuous seminorm q of X such that p q and the canonical map Qpq: Xq Xp belongs to A (Xq, Xp). It is well-known that when A is the ideal of absolutely summing (resp. precompact, weakly compact) operators, a LCS X is a nuclear (resp. Schwartz, infraSchwartz) space if and only if every continuous seminorm p of X is Acontinuous if and only if every continuous seminorm p of X is a Groth (A)seminorm. In this paper, we extend this equivalence to arbitrary operator ideals A and discuss several aspects of these constructions which are initiated by A. Grothendieck and D. Randkte, respectively. A bornological version of the theory is obtained, too.

No abstract uploaded!

We establish that boundary degrees of freedom associated with a generic codimension one null surface in D-dimensional pure Einstein gravity naturally admit a thermodynamical description. We expect the null surface thermodynamics to universally follow as a result of the diffeomorphism invariance of the theory, not relying on other special features of the null surface or the gravity theory. Using standard surface charge analysis and covariant phase-space method, we formulate laws of null surface thermodynamics which are local equations over an arbitrary null surface paralleling local versions of the zeroth- and first laws and the Gibbs-Duhem equation. This thermodynamical system is generally an open system and can be closed only when there is no flux of gravitons through the null surface. Our analysis extends the usual black hole thermodynamics to a universal feature of any area element on a generic null surface. We discuss the relevance of our study for the membrane paradigm and black hole microstates.

In this paper, we present and prove the first closed formula bounding the degree of regularity of an HFE system over an arbitrary finite field. Though these bounds are not necessarily optimal, they can be used to deduce 1. if D, the degree of the corresponding HFE polynomial, and q, the size of the corresponding finite field, are fixed, inverting HFE system is polynomial for all fields; 2. if D is of the scale O(n^α) where n is the number of variables in an HFE system, and q is fixed, inverting HFE systems is quasi-polynomial for all fields. We generalize and prove rigorously similar results by Granboulan, Joux and Stern in the case when q = 2 that were communicated at Crypto 2006.

In this paper we show how to totally break the fully homomorphic encryption scheme of eprint 2017/458.

"In this paper we consider a variation of the classical Turán-type extremal problems. Let $S$ be an $n$ -term graphical sequence, and $\sigma(S)$ be the sum of the terms in $S$ . Let $H$ be a graph. The problem is to determine the smallest even $l$ such that any $n$ -term graphical sequence $S$ having $\sigma(S)\geq l$ has a realization containing $H$ as a subgraph. Denote this value $l$ by $\sigma(H,n)$ . We show $\sigma(C_{2m+1},n)=m(2n-m-1)+2$ , for $m\geq 3$ , $n\geq 3m$ ; $\sigma(C_{2m+2},n)=m(2n-m-1)+4$ , for $m\geq 3$ , $n\geq 5m-2$ .''

The paper studies estimation of partially linear hazard regression models with varying coefficients for multivariate survival data. A profile pseudopartiallikelihood estimation method is proposed. The estimation of the parameters of the linear part is accomplished via maximization of the profile pseudopartiallikelihood, whereas the varyingcoefficient functions are considered as nuisance parameters that are profiled out of the likelihood. It is shown that the estimators of the parameters are root <i>n</i> consistent and the estimators of the nonparametric coefficient functions achieve optimal convergence rates. Asymptotic normality is obtained for the estimators of the finite parameters and varyingcoefficient functions. Consistent estimators of the asymptotic variances are derived and empirically tested, which facilitate inference for the model. We prove that the varyingcoefficient functions can be estimated as well as if the

The notion of generating topologies, introduced by Stephani El0], is useful for studying the injective hull of an operator ideal. Using Randtke's idea (see [8, p. 90] or [12,(3.2. 1) and (3.2. 7)]), we can characterize generating topologies in terms of seminorms which satisfy some expected properties (see Lemma 3.3 and Theorems 3.4 and 3.9). By a well-known and useful idea of Grothendieck, the dual notions of generating topologies and ideal-topologies, the so-called generating bornologies, are given and studied in Sect. 4. In term of ideal-bornologies, the surjective hull of an operator ideal on Banach spaces is given (see Lemma 4.8 and Theorem 4.10). In terms of these two dual concepts, we are able to classify locally convex spaces, and to study their dual results. For instance, we show that if 9.1 is a symmetric (resp. completely symmetric) operator ideal on Banach spaces then a Banach space E is an 9~-topological

Let X = (x_1,..,x_n) and Y = (y_1,...,y_m) be a pair of corresponding plaintext and ciphertext for a cryptosystem. We define an embedded surface of this cryptosystem as any polynomial equation: E(X,Y)=E(x_1,..,x_n,y_1,...,y_m)=0, which is satisfied by all such pairs. In this paper, we present a new attack on the multivariate public key cryptosystems from Diophantine equations developed by Gao and Heindl by using the embedded surfaces associated to this family of multivariate cryptosystems.

No abstract uploaded!