Paper 2024/1967 Original: eprint.iacr.org/2024/1967 ↗

Analysis of REDOG: The Pad Thai Attack

Alex Pellegrini
Marc Vorstermans
Abstract

This paper introduces the Pad Thai message recovery attack on REDOG, a rank-metric code-based encryption scheme selected for the second round of evaluation in the Korean Post-Quantum Cryptography (KPQC) competition. The attack exploits the low rank weight of a portion of the ciphertext to construct multiple systems of linear equations, one of which is noise-free and can be solved to recover the secret message. The Pad Thai attack significantly undermines the security of REDOG, revealing that its provided security is much lower than originally claimed.

Metadata
Available format(s)
PDF
Category
Attacks and cryptanalysis
Publication info
Preprint.
History
2025-06-24: last updated
2024-12-05: published
Short URL
https://ia.cr/2024/1967
License
https://creativecommons.org/publicdomain/zero/1.0/

BibTeX

@misc{cryptoeprint:2024/1967,
      author = {Alex Pellegrini and Marc Vorstermans},
      title = {Analysis of REDOG: The Pad Thai Attack},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/1967},
      year = {2024},
      url = {https://eprint.iacr.org/2024/1967}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.