Preliminary Cryptanalysis of the Biscuit Signature Scheme - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2024

Preliminary Cryptanalysis of the Biscuit Signature Scheme

Julia Sauvage
  • Fonction : Auteur
  • PersonId : 1342084

Résumé

Biscuit is a recent multivariate signature scheme based on the MPC-inthe-Head paradigm. It has been submitted to the NIST competition for additional signature schemes. Signatures are derived from a zero-knowledge proof of knowledge of the solution of a structured polynomial system. This extra structure enables efficient proofs and compact signatures. This short note demonstrates that it also makes these polynomial systems easier to solve than random ones. As a consequence, the original parameters of Biscuit failed to meet the required security levels and had to be upgraded.
Fichier principal
Vignette du fichier
main.pdf (539.88 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04418529 , version 1 (26-01-2024)

Licence

Paternité

Identifiants

  • HAL Id : hal-04418529 , version 1

Citer

Charles Bouillaguet, Julia Sauvage. Preliminary Cryptanalysis of the Biscuit Signature Scheme. 2024. ⟨hal-04418529⟩
22 Consultations
27 Téléchargements

Partager

Gmail Facebook X LinkedIn More