Skip to Main content Skip to Navigation
New interface
Conference papers

Differential Cryptanalysis for Multivariate Schemes

Abstract : In this paper we propose a novel cryptanalytic method against multivariate schemes, which adapts differential cryptanalysis to this setting. In multivariate quadratic systems, the differential of the public key is a linear map and has invariants such as the dimension of the kernel. Using linear algebra, the study of this invariant can be used to gain information on the secret key. We successfully apply this new method to break the original Matsumoto-Imai cryptosystem using properties of the differential, thus providing an alternative attack against this scheme besides the attack devised by Patarin. Next, we present an attack against a randomised variant of the Matsumoto-Imai cryptosystem, called PMI. This scheme has recently been proposed by Ding, and according to the author, it resists all previously known attacks. We believe that differential cryptanalysis is a general and powerful method that can give additional insight on most multivariate schemes proposed so far.
Document type :
Conference papers
Complete list of metadata
Contributor : Pierre-Alain Fouque Connect in order to contact the contributor
Submitted on : Monday, February 7, 2011 - 4:28:57 PM
Last modification on : Thursday, March 17, 2022 - 10:08:36 AM

Links full text




Pierre-Alain Fouque, Louis Granboulan, Jacques Stern. Differential Cryptanalysis for Multivariate Schemes. Advances in Cryptology - EUROCRYPT 2005, 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, 2005, Aarhus, Denmark. pp.341-353, ⟨10.1007/11426639_20⟩. ⟨inria-00563961⟩



Record views