Attacking the Chor-Rivest cryptosystem by improved lattice reduction

  • Authors:
  • C. P. Schnorr;H. H. Hörner

  • Affiliations:
  • Johann Wolfgang Goethe-Universität Frankfurt, Fachbereich Mathematik/Informatik, Frankfurt a.M., Germany;Johann Wolfgang Goethe-Universität Frankfurt, Fachbereich Mathematik/Informatik, Frankfurt a.M., Germany

  • Venue:
  • EUROCRYPT'95 Proceedings of the 14th annual international conference on Theory and application of cryptographic techniques
  • Year:
  • 1995

Quantified Score

Hi-index 0.00

Visualization

Abstract

We introduce algorithms for lattice basis reduction that are improvements of the famous L3-algorithm. If a random L3-reduced lattice basis b1, . . . , bn, is given such that the vector of reduced Gram-Schmidt coefficients ({µi, j} 1 ≤ j i ≤ n) is uniformly distributed in (0, 1)(n 2), then the pruned enumeration finds with positive probability a shortest lattice vector. We demonstrate the power of these algorithms by solving random subset sum problems of arbitrary density with 74 and 82 many weights, by breaking the Chor-Rivest cryptoscheme in dimensions 103 and 151 and by breaking Damgård's hash function.