Preliminary Cryptanalysis of the Biscuit Signature Scheme - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2024

Preliminary Cryptanalysis of the Biscuit Signature Scheme

Julia Sauvage
  • Fonction : Auteur
  • PersonId : 1342084

Résumé

Biscuit is a recent multivariate signature scheme based on the MPC-inthe-Head paradigm. It has been submitted to the NIST competition for additional signature schemes. Signatures are derived from a zero-knowledge proof of knowledge of the solution of a structured polynomial system. This extra structure enables efficient proofs and compact signatures. This short note demonstrates that it also makes these polynomial systems easier to solve than random ones. As a consequence, the original parameters of Biscuit failed to meet the required security levels and had to be upgraded.
Fichier principal
Vignette du fichier
main.pdf (539.88 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04418529 , version 1 (26-01-2024)

Licence

Identifiants

  • HAL Id : hal-04418529 , version 1

Citer

Charles Bouillaguet, Julia Sauvage. Preliminary Cryptanalysis of the Biscuit Signature Scheme. 2024. ⟨hal-04418529⟩
48 Consultations
36 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More