<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04418529</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-02T08:56:59+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Preliminary Cryptanalysis of the Biscuit Signature Scheme</title>
            <author role="aut">
              <persName>
                <forename type="first">Charles</forename>
                <surname>Bouillaguet</surname>
              </persName>
              <email type="md5">0936cdb57653202bff64848b7fdf7f67</email>
              <email type="domain">lip6.fr</email>
              <idno type="idhal" notation="string">charles-bouillaguet</idno>
              <idno type="idhal" notation="numeric">16426</idno>
              <idno type="halauthorid" notation="string">30434-16426</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-9416-6244</idno>
              <idno type="IDREF">https://www.idref.fr/145372898</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=5ov-TX4AAAAJ</idno>
              <affiliation ref="#struct-541721"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Julia</forename>
                <surname>Sauvage</surname>
              </persName>
              <email type="md5">6f2fe558994dfe7fb338fb7ce489926c</email>
              <email type="domain">lip6.fr</email>
              <idno type="idhal" notation="numeric">1342084</idno>
              <idno type="halauthorid" notation="string">1933456-1342084</idno>
              <affiliation ref="#struct-541721"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Charles</forename>
                <surname>Bouillaguet</surname>
              </persName>
              <email type="md5">0936cdb57653202bff64848b7fdf7f67</email>
              <email type="domain">lip6.fr</email>
            </editor>
            <funder ref="#projanr-51918"/>
            <funder ref="#projanr-52866"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2024-01-26 05:51:01</date>
              <date type="whenModified">2025-11-21 08:46:03</date>
              <date type="whenReleased">2024-01-26 15:43:22</date>
              <date type="whenProduced">2024-04-09</date>
              <date type="whenEndEmbargoed">2024-01-26</date>
              <ref type="file" target="https://hal.science/hal-04418529v1/document">
                <date notBefore="2024-01-26"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04418529v1/file/main.pdf" id="file-4418529-3838566">
                <date notBefore="2024-01-26"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="143770">
                <persName>
                  <forename>Charles</forename>
                  <surname>Bouillaguet</surname>
                </persName>
                <email type="md5">0936cdb57653202bff64848b7fdf7f67</email>
                <email type="domain">lip6.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04418529</idno>
            <idno type="halUri">https://hal.science/hal-04418529</idno>
            <idno type="halBibtex">bouillaguet:hal-04418529</idno>
            <idno type="halRefHtml">&lt;i&gt;IACR Communications in Cryptology&lt;/i&gt;, 2024, 1 (1), &lt;a target="_blank" href="https://dx.doi.org/10.62056/aemp-4c2h"&gt;&amp;#x27E8;10.62056/aemp-4c2h&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">IACR Communications in Cryptology, 2024, 1 (1), &amp;#x27E8;10.62056/aemp-4c2h&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4418529-3838566"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="LIP6" corresp="SORBONNE-UNIVERSITE">Laboratoire d'Informatique de Paris 6</idno>
            <idno type="stamp" n="SORBONNE-UNIVERSITE">Sorbonne Université</idno>
            <idno type="stamp" n="SORBONNE-UNIV" corresp="SORBONNE-UNIVERSITE">Sorbonne Université 01/01/2018</idno>
            <idno type="stamp" n="SU-SCIENCES" corresp="SORBONNE-UNIVERSITE">Faculté des Sciences de Sorbonne Université</idno>
            <idno type="stamp" n="SU-TI">Sorbonne Université - Texte Intégral</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="ALLIANCE-SU"> Alliance Sorbonne Université</idno>
            <idno type="stamp" n="SUPRA_MATHS_INFO">Mathématiques + Informatique</idno>
            <idno type="stamp" n="ANR_QUANTIQUE">ANR QUANTIQUE</idno>
            <idno type="stamp" n="ANR_QUANTIQUE_1" corresp="ANR_QUANTIQUE">ANR_QUANTIQUE_1</idno>
            <idno type="stamp" n="ANR_QUANTIQUE_4" corresp="ANR_QUANTIQUE">ANR_QUANTIQUE_4</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Preliminary Cryptanalysis of the Biscuit Signature Scheme</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Charles</forename>
                    <surname>Bouillaguet</surname>
                  </persName>
                  <email type="md5">0936cdb57653202bff64848b7fdf7f67</email>
                  <email type="domain">lip6.fr</email>
                  <idno type="idhal" notation="string">charles-bouillaguet</idno>
                  <idno type="idhal" notation="numeric">16426</idno>
                  <idno type="halauthorid" notation="string">30434-16426</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-9416-6244</idno>
                  <idno type="IDREF">https://www.idref.fr/145372898</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=5ov-TX4AAAAJ</idno>
                  <affiliation ref="#struct-541721"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Julia</forename>
                    <surname>Sauvage</surname>
                  </persName>
                  <email type="md5">6f2fe558994dfe7fb338fb7ce489926c</email>
                  <email type="domain">lip6.fr</email>
                  <idno type="idhal" notation="numeric">1342084</idno>
                  <idno type="halauthorid" notation="string">1933456-1342084</idno>
                  <affiliation ref="#struct-541721"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">858698</idno>
                <idno type="issn">3006-5496</idno>
                <title level="j">IACR Communications in Cryptology</title>
                <imprint>
                  <publisher>International Association for Cryptologic Research (IACR)</publisher>
                  <biblScope unit="volume">1</biblScope>
                  <biblScope unit="issue">1</biblScope>
                  <date type="datePub">2024-04-09</date>
                </imprint>
              </monogr>
              <idno type="doi">10.62056/aemp-4c2h</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">biscuit signature scheme</term>
                <term xml:lang="en">multivariate crypto</term>
                <term xml:lang="en">algebraic attack</term>
                <term xml:lang="en">algebraic attack multivariate crypto biscuit signature scheme</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Biscuit is a recent multivariate signature scheme based on the MPC-inthe-Head paradigm. It has been submitted to the NIST competition for additional signature schemes. Signatures are derived from a zero-knowledge proof of knowledge of the solution of a structured polynomial system. This extra structure enables efficient proofs and compact signatures. This short note demonstrates that it also makes these polynomial systems easier to solve than random ones. As a consequence, the original parameters of Biscuit failed to meet the required security levels and had to be upgraded.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-541721" status="VALID">
          <orgName>ALgorithms for coMmunicAtion SecuriTY</orgName>
          <orgName type="acronym">ALMASTY</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-541703" type="direct"/>
            <relation active="#struct-413221" type="indirect"/>
            <relation name="UMR7606" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-541703" status="VALID">
          <idno type="IdRef">13558292X</idno>
          <idno type="RNSR">199712651U</idno>
          <idno type="ROR">https://ror.org/05krcen59</idno>
          <orgName>LIP6</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <addrLine>4 Place JUSSIEU 75252 PARIS CEDEX 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.lip6.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-413221" type="direct"/>
            <relation name="UMR7606" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-413221" status="VALID">
          <idno type="IdRef">221333754</idno>
          <idno type="ROR">https://ror.org/02en5vm52</idno>
          <orgName>Sorbonne Université</orgName>
          <orgName type="acronym">SU</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <addrLine>21 rue de l’École de médecine - 75006 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.sorbonne-universite.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-51918" status="VALID">
          <idno type="anr">ANR-20-CE39-0002</idno>
          <orgName>GORILLA</orgName>
          <desc>Cryptanalyse algorithmique avec de véritables implémentations</desc>
          <date type="start">2020</date>
        </org>
        <org type="anrProject" xml:id="projanr-52866" status="VALID">
          <idno type="anr">ANR-20-ASTR-0011</idno>
          <orgName>POSTCRYPTUM</orgName>
          <desc>Cryptanalyse algèbrique pour la cryptographie post-quantum</desc>
          <date type="start">2020</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>