Preliminary Cryptanalysis of the Biscuit Signature Scheme - Archive ouverte HAL
Article Dans Une Revue IACR Communications in Cryptology Année : 2024

Preliminary Cryptanalysis of the Biscuit Signature Scheme

Julia Sauvage
  • Fonction : Auteur
  • PersonId : 1342084

Résumé

Biscuit is a recent multivariate signature scheme based on the MPC-inthe-Head paradigm. It has been submitted to the NIST competition for additional signature schemes. Signatures are derived from a zero-knowledge proof of knowledge of the solution of a structured polynomial system. This extra structure enables efficient proofs and compact signatures. This short note demonstrates that it also makes these polynomial systems easier to solve than random ones. As a consequence, the original parameters of Biscuit failed to meet the required security levels and had to be upgraded.
Fichier principal
Vignette du fichier
main.pdf (539.88 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04418529 , version 1 (26-01-2024)

Licence

Identifiants

Citer

Charles Bouillaguet, Julia Sauvage. Preliminary Cryptanalysis of the Biscuit Signature Scheme. IACR Communications in Cryptology, 2024, 1 (1), ⟨10.62056/aemp-4c2h⟩. ⟨hal-04418529⟩
107 Consultations
73 Téléchargements

Altmetric

Partager

More