Why you cannot even hope to use Grobner bases in cryptography: an eternal golden braid of failures

被引:3
|
作者
Barkee, Boo [1 ]
Ceria, Michela [2 ]
Moriarty, Theo [3 ]
Visconti, Andrea [2 ]
机构
[1] Sore Bone, Milan, Italy
[2] Univ Milan, Dept Comp Sci, Via Celoria 18, I-20133 Milan, Italy
[3] SPECTRE, Milan, Italy
关键词
Barkee's cryptosystem; Polly Cracker; Buchberger Theory; Stickel's protocol; MEMBERSHIP PROBLEM; POLLY CRACKER; CRYPTANALYSIS; HFE;
D O I
10.1007/s00200-020-00428-w
中图分类号
TP39 [计算机的应用];
学科分类号
081203 ; 0835 ;
摘要
In 1994, Moss Sweedler's dog proposed a cryptosystem, known as Barkee's Cryptosystem, and the related cryptanalysis. Its explicit aim was to dispel the proposal of using the urban legend that "Grobner bases are hard to compute", in order to devise a public key cryptography scheme. Therefore he claimed that "no scheme using Grobner bases will ever work". Later, further variations of Barkee's Cryptosystem were proposed on the basis of another urban legend, related to the infiniteness (and consequent uncomputability) of non-commutative Grobner bases; unfortunately Pritchard's algorithm for computing (finite) non-commutative Grobner bases was already available at that time and was sufficient to crash the system proposed by Ackermann and Kreuzer. The proposal by Rai, where the private key is a principal ideal and the public key is a bunch of polynomials within this principal ideal, is surely immune to Pritchard's attack but not to Davenport's factorization algorithm. It was recently adapted specializing and extending Stickel's Diffie-Hellman protocols in the setting of Ore extension. We here propose a further generalization and show that such protocols can be broken simply via polynomial division and Buchberger reduction.
引用
收藏
页码:235 / 252
页数:18
相关论文
共 4 条
  • [1] Why you cannot even hope to use Gröbner bases in cryptography: an eternal golden braid of failures
    Boo Barkee
    Michela Ceria
    Theo Moriarty
    Andrea Visconti
    [J]. Applicable Algebra in Engineering, Communication and Computing, 2020, 31 : 235 - 252
  • [2] Why you cannot even hope to use Ore algebras in Cryptography
    Michela Ceria
    Teo Mora
    Andrea Visconti
    [J]. Applicable Algebra in Engineering, Communication and Computing, 2021, 32 : 229 - 244
  • [3] Why you cannot even hope to use Ore algebras in Cryptography
    Ceria, Michela
    Mora, Teo
    Visconti, Andrea
    [J]. APPLICABLE ALGEBRA IN ENGINEERING COMMUNICATION AND COMPUTING, 2021, 32 (03) : 229 - 244
  • [4] WHY YOU CANNOT EVEN HOPE TO USE GROBNER BASES IN PUBLIC-KEY CRYPTOGRAPHY - AN OPEN-LETTER TO A SCIENTIST WHO FAILED AND A CHALLENGE TO THOSE WHO HAVE NOT YET FAILED
    BARKEE, B
    CAN, DC
    ECKS, J
    MORIARTY, T
    REE, RF
    [J]. JOURNAL OF SYMBOLIC COMPUTATION, 1994, 18 (06) : 497 - 501