Key recovery device and method for UOV signature

Abstract

The invention discloses a key recovery device for UOV signature. The device comprises a message and signature module, a power consumption curve module, a key operation module, a key guess value module, and a central processing module; the message and signature module is used for generating N message-signature pairs; the power consumption curve module is used for collecting power consumption curvesgenerated during the generation process of each message-signature pair; the key operation module is used for sequentially selecting calculation formulas in which all keys participate during a UOV signature generation process; the key guess value module is used for sequentially selecting elements in GF(2k) as the guess values of the keys in each selected calculation formula; and the central processing module is used for analyzing N power consumption curves when a guess value is selected each time, so as to obtain keys in the UOV signature algorithm. Correspondingly, the present invention alsodiscloses a key recovery method for the UOV signature. With the device and method of the invention adopted, the security problem of the UOV signature can be discovered, so that technical support can be provided for the protection of the UOV.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a UOV signature key recovery device and method. Background technique [0002] UOV signature is a kind of multi-variable signature, which has the ability to resist quantum computer attacks. Its security is based on an NP-Hard problem, that is, solving multivariate quadratic equations in finite fields. [0003] Multivariate structure of UOV signature Contains a central mapping transformation and an affine transformation: y 0 ,y 1 ,...,y m-1 is the message, x 0 , x 1 ,...,x n-1 is the signature, F is the central mapping transformation, L is the affine transformation, and the key is composed of parameters of F and L. inverse transformation of center map Including a multivariate quadratic equation system, is the center mapping transformation result. inverse of affine transformation in the form of A is an n×n matrix, b is a vector of length n, and a and b...

AI Technical Summary

Problems solved by technology

[0004] In the existing technology, the key recovery of UOV signature mainly adopts algebraic analysis method, which is inefficient and hinders the wide application of UOV signature to a certain extent.

Images