Singular points of UOV and VOX - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2024

Singular points of UOV and VOX

Pierre Pébereau
  • Fonction : Auteur
  • PersonId : 1257261

Résumé

In this work, we study the singular locus of the varieties defined by the public keys of UOV and VOX, two multivariate quadratic signature schemes submitted to the additional NIST call for signature schemes. Singular points do not exist for generic quadratic systems, which enables us to introduce two new algebraic attacks against UOVbased schemes. We show that they can be seen as an algebraic variant of the Kipnis-Shamir attack, which can be obtained in our framework as an enumerative approach of solving a bihomogeneous modeling of the computation of singular points. This allows us to highlight some heuristics implicitly relied on by the Kipnis-Shamir attack. We give new attacks for UOV + and VOX targeting singular points of the public key equations. Our attacks lower the security of the schemes, both asymptotically and in number of gates, showing in particular that the parameters sets proposed for these schemes do not meet the NIST security requirements. More precisely, we show that the security of UOV + was overestimated by factors 2 22 , 2 36 , 2 59 for security levels I, III, V respectively. We conclude the attack on VOX by showing that an attacker can perform a full key recovery from one vector obtained in the previous attacks.
Fichier principal
Vignette du fichier
paper.pdf (469.63 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04454521 , version 1 (13-02-2024)

Identifiants

  • HAL Id : hal-04454521 , version 1

Citer

Pierre Pébereau. Singular points of UOV and VOX. 2024. ⟨hal-04454521⟩
70 Consultations
62 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More