Paper 2022/138

Resisting Key-Extraction and Code-Compression: a Secure Implementation of the HFE Signature Scheme in the White-Box Model

Pierre Galissant and Louis Goubin

Abstract

Cryptography is increasingly deployed in applications running on open devices in which the software is extremely vulnerable to attacks, since the attacker has complete control over the execution platform and the software implementation itself. This creates a challenge for cryptography: design implementations of cryptographic algorithms that are secure, not only in the black-box model, but also in this attack context that is referred to as the white-box adversary model. Moreover, emerging applications such as mobile payment, mobile contract signing or blockchain-based technologies have created a need for white-box implementations of public-key cryptography, and especially of signature algorithms. However, while many attempts were made to construct white-box implementations of block-ciphers, almost no white-box implementations have been published for what concerns asymmetric schemes. We present here a concrete white-box implementation of the well-known HFE signature algorithm for a specific set of internal polynomials. For a security level $2^{80}$, the public key size is approximately 62.5 MB and the white-box implementation of the signature algorithm has a size approximately 256 GB.

Metadata
Available format(s)
PDF
Category
Public-key cryptography
Publication info
Preprint. MINOR revision.
Keywords
White-box CryptographyPublic-Key CryptographyMultivariate Cryptography
Contact author(s)
pierre galissant @ uvsq fr
louis goubin @ uvsq fr
History
2022-04-08: revised
2022-02-09: received
See all versions
Short URL
https://ia.cr/2022/138
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2022/138,
      author = {Pierre Galissant and Louis Goubin},
      title = {Resisting Key-Extraction and Code-Compression: a Secure Implementation of the HFE Signature Scheme in the White-Box Model},
      howpublished = {Cryptology ePrint Archive, Paper 2022/138},
      year = {2022},
      note = {\url{https://eprint.iacr.org/2022/138}},
      url = {https://eprint.iacr.org/2022/138}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.