Paper 2021/134

Cryptanalysis of a code-based signature scheme without trapdoors

Marco Baldi, Jean-Christophe Deneuville, Edoardo Persichetti, and Paolo Santini

Abstract

We propose an attack on the recent attempt by Li, Xing and Yeo to produce a code-based signature scheme using the Schnorr-Lyubashevsky approach in the Hamming metric, and verify its effectiveness through numerical simulations. Differently from other (unsuccessful) proposals, this new scheme exploits rejection sampling along with dense noise vectors to hide the secret key structure in produced signatures. We show that these measures, besides yielding very slow signing times and rather long signatures, do not succeed in protecting the secret key. We are indeed able to prove the existence of a strong correlation between produced signatures, which ultimately leaks information about the secret key. To support this claim, we use both theoretical arguments and numerical evidences. Finally, we employ such a weakness to mount a full key recovery attack, which is able to recover the secret key after the observation of a bunch of signatures. Our results show that the considered scheme may be secure only for one-time usage.

Metadata
Available format(s)
PDF
Category
Public-key cryptography
Publication info
Published elsewhere. Minor revision. IEEE COMML
Keywords
Code-based cryptographyCryptanalysisDigital signatureZero-knowledge identification scheme
Contact author(s)
jean-christophe deneuville @ enac fr
History
2021-07-08: last of 2 revisions
2021-02-10: received
See all versions
Short URL
https://ia.cr/2021/134
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2021/134,
      author = {Marco Baldi and Jean-Christophe Deneuville and Edoardo Persichetti and Paolo Santini},
      title = {Cryptanalysis of a code-based signature scheme without trapdoors},
      howpublished = {Cryptology {ePrint} Archive, Paper 2021/134},
      year = {2021},
      url = {https://eprint.iacr.org/2021/134}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.