Wave Parameter Selection - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Wave Parameter Selection

Résumé

Wave is a provably EUF-CMA (existential unforgeability under adaptive chosen message attacks) digital signature scheme based on codes [15]. It is a hash-and-sign primitive and its security is built according to a GPV-like framework [19] under two assumptions related to coding theory: (i) the hardness of finding a word of prescribed Hamming weight and prescribed syndrome, and (ii) the pseudo-randomness of ternary generalized codes. Forgery attacks (i)—or message attacks—consist in solving the ternary decoding problem for large weight [7], while, to the best of our knowledge, key attacks (ii) will try to exhibit words that are characteristic of codes, which are called type- or type- codewords in the present paper. In the current state-of-the-art, the best known attacks both reduce to various flavours of Information Set Decoding (ISD) algorithms for different regime of parameters. In this paper we give estimates for the complexities of the best known ISD variants for those regimes. Maximizing the computational effort, thus the security, for both attacks lead to conflicting constraints on the parameters. We provide here a methodology to derive optimal trade-offs for selecting parameters for the Wave signature scheme achieving a given security. We apply this methodology to the current state-of-the-art and propose some effective parameters for Wave. For bits of classical security, the signature is 737 bytes long, scaling linearly with the security, and the public key size is 3.6 Mbytes, scaling quadratically with the security.
Fichier principal
Vignette du fichier
keysec.pdf (375.41 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Licence : CC BY - Paternité

Dates et versions

hal-04525954 , version 1 (29-03-2024)

Licence

Paternité

Identifiants

Citer

Nicolas Sendrier. Wave Parameter Selection. PQCrypto 2023 - 14th International Conference on Post-Quantum Cryptography, Aug 2023, College Park, United States. pp.91-110, ⟨10.1007/978-3-031-40003-2_4⟩. ⟨hal-04525954⟩

Collections

INRIA INRIA2 ANR
4 Consultations
1 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More