Kipnis-Shamir Attack on HFE Revisited

  • Authors:
  • Xin Jiang;Jintai Ding;Lei Hu

  • Affiliations:
  • State Key Lab of Information Security, Chinese Academy of Sciences, Beijing, China;University of Cincinnati, USA and Technical University of Darmstadt, Germany;State Key Lab of Information Security, Chinese Academy of Sciences, Beijing, China

  • Venue:
  • Information Security and Cryptology
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper, we show the claims in the original Kipnis-Shamir attack on the HFE cryptosystems and the improved attack by Courtois that the complexity of the attacks is polynomial in terms of the number of variables are invalid. We present computer experiments and a theoretical argument using basic algebraic geometry to explain why it is so. Furthermore we show that even with the help of the powerful new Gröbner basis algorithm like F4, the Kipnis-Shamir attack still should be exponential but not polynomial. This again is supported by our theoretical argument.