Paper 2023/1760 Original: eprint.iacr.org/2023/1760 ↗

Biscuit: New MPCitH Signature Scheme from Structured Multivariate Polynomials

Luk Bettale
Delaram Kahrobaei
Ludovic Perret
Javier Verbel
Abstract

This paper describes Biscuit, a new multivariate-based signature scheme derived using the MPC-in-the-Head (MPCitH) approach. The security of Biscuit is related to the problem of solving a set of structured quadratic algebraic equations. These equations are highly compact and can be evaluated using very few multiplications (one multiplication per equation). The core of Biscuit is a rather simple MPC protocol for secure multiplications using standard optimized multiplicative triples. This paper also includes several improvements toward the initial version of Biscuit submitted to the NIST PQC standardization process for additional signature schemes. Notably, we introduce a new hypercube variant of Biscuit, refine the security analysis with recent third-party attacks, and present a new AVX2 implementation of Biscuit.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
History
2024-02-11: last updated
2023-11-14: published
Short URL
https://ia.cr/2023/1760
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2023/1760,
      author = {Luk Bettale and Delaram Kahrobaei and Ludovic Perret and Javier Verbel},
      title = {Biscuit: New MPCitH Signature Scheme from Structured Multivariate Polynomials},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/1760},
      year = {2023},
      url = {https://eprint.iacr.org/2023/1760}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.