Cryptanalysis of the SNOVA signature scheme

Peigen Li; Jintai Ding

Paper 2024/110

Cryptanalysis of the SNOVA signature scheme

Peigen Li, Beijing Institute of Mathematical Sciences and Applications, Yau Mathematical Sciences Center, Tsinghua University

Jintai Ding, Beijing Institute of Mathematical Sciences and Applications, Yau Mathematical Sciences Center, Tsinghua University

Abstract

SNOVA is a variant of a UOV-type signature scheme over a noncommutative ring. In this article, we demonstrate that certain parameters provided by authors in SNOVA fail to meet the NIST security level, and the complexities are lower than those claimed by SNOVA.

Metadata

Available format(s): PDF
Category: Attacks and cryptanalysis
Publication info: Preprint.
Keywords: MPKCs;UOV;SNOVA
Contact author(s): lpg22 @ bimsa cn
jintai ding @ gmail com
History: 2024-01-26: approved; 2024-01-25: received; See all versions
Short URL: https://ia.cr/2024/110
License: CC BY-NC-SA

BibTeX

@misc{cryptoeprint:2024/110,
      author = {Peigen Li and Jintai Ding},
      title = {Cryptanalysis of the SNOVA signature scheme},
      howpublished = {Cryptology ePrint Archive, Paper 2024/110},
      year = {2024},
      note = {\url{https://eprint.iacr.org/2024/110}},
      url = {https://eprint.iacr.org/2024/110}
}