On lower bounds for information set decoding over \(\mathbb F_q\) and on the effect of partial knowledge (Q2363734)

From MaRDI portal
scientific article
Language Label Description Also known as
English
On lower bounds for information set decoding over \(\mathbb F_q\) and on the effect of partial knowledge
scientific article

    Statements

    On lower bounds for information set decoding over \(\mathbb F_q\) and on the effect of partial knowledge (English)
    0 references
    0 references
    0 references
    0 references
    0 references
    0 references
    26 July 2017
    0 references
    Summary: Code-based cryptosystems are promising candidates for post-quantum cryptography since they are fast, require only basic arithmetic because their security is well understood. The increasing number of cryptographic schemes based on codes over fields other than \(\mathbb F_2\) presents, however, security issues that are not relevant in the case of binary codes; the security of such constructions, therefore, requires separate assessment. Information set decoding (ISD) is one of the most important generic attacks against code-based cryptosystems. We give lower bounds for ISD over \(\mathbb F_q\), thereby anticipating future software and hardware improvements. Our results allow to compute conservative parameters for cryptographic applications. While most security proofs assume that an attacker does not have any additional information about the secret, we show that in certain scenarios an attacker can gain partial knowledge of the secret. We present how this knowledge can be used to improve the efficiency of an attack and give new bounds for the complexity of such an attack. In this paper, we analyse two types of partial knowledge including concrete scenarios and give an idea how to prevent the leakage of such knowledge to an attacker.
    0 references
    codes
    0 references
    post-quantum cryptography
    0 references
    information set decoding
    0 references
    ISD
    0 references
    lower bounds
    0 references
    partial knowledge
    0 references
    cryptosystems
    0 references
    security
    0 references
    attacks
    0 references

    Identifiers