TY - GEN
T1 - General fault attacks on multivariate public key cryptosystems
AU - Hashimoto, Yasufumi
AU - Takagi, Tsuyoshi
AU - Sakurai, Kouichi
PY - 2011
Y1 - 2011
N2 - The multivariate public key cryptosystem (MPKC), which is based on the problem of solving a set of multivariate systems of quadratic equations over a finite field, is expected to be secure against quantum attacks. Although there are several existing schemes in MPKC that survived known attacks and are much faster than RSA and ECC, there have been few discussions on security against physical attacks, aside from the work of Okeya et al. (2005) on side-channel attacks against Sflash. In this study, we describe general fault attacks on MPKCs including Big Field type (e.g. Matsumoto-Imai, HFE and Sflash) and Stepwise Triangular System (STS) type (e.g. UOV, Rainbow and TTM/TTS). For both types, recovering (parts of) the secret keys S,T with our fault attacks becomes more efficient than doing without them. Especially, on the Big Field type, only single fault is sufficient to recover the secret keys.
AB - The multivariate public key cryptosystem (MPKC), which is based on the problem of solving a set of multivariate systems of quadratic equations over a finite field, is expected to be secure against quantum attacks. Although there are several existing schemes in MPKC that survived known attacks and are much faster than RSA and ECC, there have been few discussions on security against physical attacks, aside from the work of Okeya et al. (2005) on side-channel attacks against Sflash. In this study, we describe general fault attacks on MPKCs including Big Field type (e.g. Matsumoto-Imai, HFE and Sflash) and Stepwise Triangular System (STS) type (e.g. UOV, Rainbow and TTM/TTS). For both types, recovering (parts of) the secret keys S,T with our fault attacks becomes more efficient than doing without them. Especially, on the Big Field type, only single fault is sufficient to recover the secret keys.
KW - fault attacks
KW - multivariate public-key cryptosystems
KW - post-quantum cryptography
UR - https://www.scopus.com/pages/publications/82955165020
UR - https://www.scopus.com/pages/publications/82955165020#tab=citedBy
U2 - 10.1007/978-3-642-25405-5_1
DO - 10.1007/978-3-642-25405-5_1
M3 - Conference contribution
AN - SCOPUS:82955165020
SN - 9783642254048
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 1
EP - 18
BT - Post-Quantum Cryptography - 4th International Workshop, PQCrypto 2011, Proceedings
T2 - 4th International Workshop on Post-Quantum Cryptography, PQCrypto 2011
Y2 - 29 November 2011 through 2 December 2011
ER -