A Key Substitution Attack on SFLASH^{v3}

Willi Geiselmann; Rainer Steinwandt

Paper 2003/245 Original: eprint.iacr.org/2003/245 ↗

A Key Substitution Attack on SFLASH^{v3}

Willi Geiselmann

Rainer Steinwandt

Abstract

A practical key substitution attack on SFLASH^{v3} is described: Given a valid (message, signature) pair (m,\sigma) for some public key v_0, one can derive another public key v_1 (along with matching secret data) such that (m,\sigma) is also valid for v_1. The computational effort needed for finding such a `duplicate' key is comparable to the effort needed for ordinary key generation.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: Preprint.
History: 2003-11-26: last updated; 2003-11-26: published
Short URL: https://ia.cr/2003/245
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2003/245,
      author = {Willi Geiselmann and Rainer Steinwandt},
      title = {A Key Substitution Attack on SFLASH^{v3}},
      howpublished = {Cryptology {ePrint} Archive, Paper 2003/245},
      year = {2003},
      url = {https://eprint.iacr.org/2003/245}
}