Algebraic Cryptanalysis of the PKC'2009 Algebraic Surface Cryptosystem

Abstract. In this paper, we fully break the Algebraic Surface Cryptosystem (ASC for short) proposed at PKC’2009 [3]. This system is based on an unusual problem in multivariate cryptography: the Section Finding Problem. Given an algebraic surface X(x, y, t) ∈ Fp[x, y, t] such that degxy X(x, y, t) = w, the question is to find a pair of polynomials of degree d, ux(t) and uy(t), such that X(ux(t), uy(t), t) = 0. In ASC, the public key is the surface, and the secret key is the section. This asymmetric encryption scheme enjoys reasonable sizes of the keys: for recommended parameters, the size of the secret key is only 102 bits and the size of the public key is 500 bits. In this paper, we propose a message recovery attack whose complexity is quasi-linear in the size of the secret key. The main idea of this algebraic attack is to decompose ideals deduced from the ciphertext in order to avoid to solve the section finding problem. Experimental results show that we can break the cipher for...

• Type: Conference
• Year: 2010
• Where: PKC
• Authors: Jean-Charles Faugère, Pierre-Jean Spaenlehauer
• Keywords: Algebraic Surface, Cryptology, PKC 2010, Public Key, Secret Key