Paper 2019/468 Original: eprint.iacr.org/2019/468 ↗
The Mersenne Low Hamming Combination Search Problem can be reduced to an ILP Problem
Abstract
In 2017, Aggarwal, Joux, Prakash, and Santha proposed an innovative NTRU-like public-key cryptosystem that was believed to be quantum resistant, based on Mersenne prime numbers q = 2^N-1. After a successful attack designed by Beunardeau, Connolly, Geraud, and Naccache, the authors revised the protocol which was accepted for Round 1 of the Post-Quantum Cryptography Standardization Process organized by NIST. The security of this protocol is based on the assumption that a so-called Mersenne Low Hamming Combination Search Problem (MLHCombSP) is hard to solve. In this work, we present a reduction of MLHCombSP to Integer Linear Programming (ILP). This opens new research directions for assessing the concrete robustness of such cryptosystem. In particular, we uncover a new family of weak keys, for whose our attack runs in polynomial time.
Metadata
- Available format(s)
PDF- Category
- Public-key cryptography
- Publication info
- Preprint.
- History
- 2022-10-06: last updated
- 2019-05-10: published
- Short URL
- https://ia.cr/2019/468
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2019/468,
author = {Alessandro Budroni and Andrea Tenti},
title = {The Mersenne Low Hamming Combination Search Problem can be reduced to an ILP Problem},
howpublished = {Cryptology {ePrint} Archive, Paper 2019/468},
year = {2019},
url = {https://eprint.iacr.org/2019/468}
}