Differential Cryptanalysis for Multivariate Schemes - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2005

Differential Cryptanalysis for Multivariate Schemes


In this paper we propose a novel cryptanalytic method against multivariate schemes, which adapts differential cryptanalysis to this setting. In multivariate quadratic systems, the differential of the public key is a linear map and has invariants such as the dimension of the kernel. Using linear algebra, the study of this invariant can be used to gain information on the secret key. We successfully apply this new method to break the original Matsumoto-Imai cryptosystem using properties of the differential, thus providing an alternative attack against this scheme besides the attack devised by Patarin. Next, we present an attack against a randomised variant of the Matsumoto-Imai cryptosystem, called PMI. This scheme has recently been proposed by Ding, and according to the author, it resists all previously known attacks. We believe that differential cryptanalysis is a general and powerful method that can give additional insight on most multivariate schemes proposed so far.

Dates and versions

inria-00563961 , version 1 (07-02-2011)



Pierre-Alain Fouque, Louis Granboulan, Jacques Stern. Differential Cryptanalysis for Multivariate Schemes. Advances in Cryptology - EUROCRYPT 2005, 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, 2005, Aarhus, Denmark. pp.341-353, ⟨10.1007/11426639_20⟩. ⟨inria-00563961⟩
33 View
0 Download



Gmail Facebook X LinkedIn More