One vector to rule them all: Key recovery from one vector in UOV schemes - Archive ouverte HAL
Communication Dans Un Congrès Année : 2024

One vector to rule them all: Key recovery from one vector in UOV schemes

Résumé

Unbalanced Oil and Vinegar is a multivariate signature scheme that was introduced in 1999. Most multivariate candidates for signature schemes at NIST's PQC standardization process are either based on UOV or closely related to it. The UOV trapdoor is a secret subspace, the "oil subspace". We show how to recover an equivalent secret key from the knowledge of a single vector in the oil subspace in any characteristic. The reconciliation attack was sped-up by adding some bilinear equations in the subsequent computations, and able to conclude after two vectors were found. We show here that these bilinear equations contain enough information to dismiss the quadratic equations and retrieve the secret subspace with linear algebra for practical parametrizations of UOV, in at most 15 seconds for modern instanciations of UOV. This proves that the security of the UOV scheme lies in the complexity of finding exactly one vector in the oil space. In addition, we deduce a key recovery attack from any forgery attack by applying a corollary of our main result. With these results, we significantly improve tools used in the side-channel analysis of UOV, and introduce new targets for such methods. We show how to extend this result to schemes related to UOV, such as MAYO and VOX.
Fichier principal
Vignette du fichier
paper.pdf (358.73 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04215978 , version 1 (23-09-2023)

Identifiants

Citer

Pierre Pébereau. One vector to rule them all: Key recovery from one vector in UOV schemes. 15th International Conference on Post-Quantum Cryptography - PQCrypto 2024, Jun 2024, Oxford, United Kingdom. pp.92-108, ⟨10.1007/978-3-031-62746-0_5⟩. ⟨hal-04215978⟩
107 Consultations
135 Téléchargements

Altmetric

Partager

More