Paper 2026/2528
Revisiting the Security of VDOO
Abstract
VDOO is a multivariate signature scheme submitted to the Next-generation Commercial Cryptographic Algorithms Program (NGCC). We study the security of its submitted parameter sets. In this paper, VDOO is described as a multilayer Rainbow construction. By retaining only its last oil space, we obtain a generalized UOV instance and apply existing wedge attacks. For the parameter set targeting 512-bit security, we estimate costs of $2^{432}$ and $2^{379}$ gates for the reconciliation and intersection variants, respectively. These estimates rely on the assumptions of the attack model and are below both the claimed security level and the attack costs reported in the specification. Our analysis uses only the generalized UOV structure. The additional information in the multilayer structure may allow further improvements. Our results also motivate further study of parameter choices that balance resistance to known attacks with signing efficiency.
Metadata
- Available format(s)
-
PDF
- Category
- Attacks and cryptanalysis
- Publication info
- Preprint.
- Keywords
- Post-quantum cryptographyMultivariate cryptographyCryptanalysisVDOOWedge attacks
- Contact author(s)
-
lisiyu22 @ mails tsinghua edu cn
guoh22 @ mails tsinghua edu cn
lpg22 @ bimsa cn
taosy22 @ mails tsinghua edu cn - History
- 2026-10-19: approved
- 2026-10-18: received
- See all versions
- Short URL
- https://ia.cr/2026/2528
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2026/2528,
author = {Siyu Li and Hao Guo and Peigen Li and Siyong Tao},
title = {Revisiting the Security of {VDOO}},
howpublished = {Cryptology {ePrint} Archive, Paper 2026/2528},
year = {2026},
url = {https://eprint.iacr.org/2026/2528}
}
