One vector to rule them all: Key recovery from one vector in UOV schemes - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2023

One vector to rule them all: Key recovery from one vector in UOV schemes

Pierre Pébereau
  • Fonction : Auteur
  • PersonId : 1257261

Résumé

Unbalanced Oil and Vinegar is a multivariate signature scheme that was introduced in 1999. Most multivariate candidates for signature schemes at NIST's PQC standardization process are either based on UOV or closely related to it. The UOV trapdoor is a secret subspace, the "oil subspace". We show how to recover an equivalent secret key from the knowledge of a single vector in the oil subspace in any characteristic. The reconciliation attack was sped-up by adding some bilinear equations in the subsequent computations, and able to conclude after two vectors were found. We show here that these bilinear equations contain enough information to dismiss the quadratic equations and retrieve the secret subspace with linear algebra for practical parametrizations of UOV, in at most 15 seconds for modern instanciations of UOV. This proves that the security of the UOV scheme lies in the complexity of finding exactly one vector in the oil space. In addition, we deduce a key recovery attack from any forgery attack by applying a corollary of our main result. With these results, we significantly improve tools used in the side-channel analysis of UOV, and introduce new targets for such methods. We show how to extend this result to schemes related to UOV, such as MAYO and VOX.
Fichier principal
Vignette du fichier
paper.pdf (358.73 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04215978 , version 1 (23-09-2023)

Identifiants

  • HAL Id : hal-04215978 , version 1

Citer

Pierre Pébereau. One vector to rule them all: Key recovery from one vector in UOV schemes. 2023. ⟨hal-04215978⟩
31 Consultations
25 Téléchargements

Partager

Gmail Facebook X LinkedIn More