Polynomial Equivalence Problems: Algorithmic and Theoretical Aspects

The Isomorphism of Polynomials (IP) [28], which is the main concern of this paper, originally corresponds to the problem of recovering the secret key of a C scheme [26]. Besides, the security of various other schemes (signature, authentication [28], traitor tracing [5], . . . ) also depends on the practical hardness of IP. Due to its numerous applications, the Isomorphism of Polynomials is thus one of the most fundamental problems in multivariate cryptography. In this paper, we address two complementary aspects of IP, namely its theoretical and practical difficulty. We present an upper bound on the theoretical complexity of "IP-like" problems, i.e. a problem consisting in recovering a particular transformation between two sets of multivariate polynomials. We prove that these problems are not NP-Hard (provided that the polynomial hierarchy does not collapse). Concerning the practical aspect, we present a new algorithm for solving IP. In a nutshell, the idea is to generate a su...

• Type: Conference
• Year: 2006
• Where: EUROCRYPT
• Authors: Jean-Charles Faugère, Ludovic Perret
• Keywords: Cryptology, EUROCRYPT 2006, Isomorphism, Polynomials, Practical