Paper 2024/148 Original: eprint.iacr.org/2024/148 ↗
Preliminary Cryptanalysis of the Biscuit Signature Scheme
Abstract
Biscuit is a recent multivariate signature scheme based on the MPC-in-the-Head paradigm. It has been submitted to the NIST competition for additional signature schemes. Signatures are derived from a zero-knowledge proof of knowledge of the solution of a structured polynomial system. This extra structure enables efficient proofs and compact signatures. This short note demonstrates that it also makes these polynomial systems easier to solve than random ones. As a consequence, the original parameters of Biscuit failed to meet the required security levels and had to be upgraded.
Metadata
- Available format(s)
PDF- Category
- Attacks and cryptanalysis
- Publication info
- Preprint.
- History
- 2024-02-01: last updated
- 2024-02-01: published
- Short URL
- https://ia.cr/2024/148
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2024/148,
author = {Charles Bouillaguet and Julia Sauvage},
title = {Preliminary Cryptanalysis of the Biscuit Signature Scheme},
howpublished = {Cryptology {ePrint} Archive, Paper 2024/148},
year = {2024},
url = {https://eprint.iacr.org/2024/148}
}