Large superfluous keys in multivariate quadratic asymmetric systems

  • Authors:
  • Christopher Wolf;Bart Preneel

  • Affiliations:
  • K.U.Leuven, ESAT-COSIC, Leuven-Heverlee, Belgium;K.U.Leuven, ESAT-COSIC, Leuven-Heverlee, Belgium

  • Venue:
  • PKC'05 Proceedings of the 8th international conference on Theory and Practice in Public Key Cryptography
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this article, we show that public key schemes based on multivariate quadratic equations allow many equivalent, and hence superfluous private keys. We achieve this result by investigating several transformations to identify these keys and show their application to Hidden Field Equations (HFE), C*, and Unbalanced Oil and Vinegar schemes (UOV). In all cases, we are able to reduce the size of the private – and hence the public – key space by at least one order of magnitude. We see applications of our technique both in cryptanalysis of these schemes and in memory efficient implementations.