Scholarlink

<p>We consider the <Emphasis FontCategory="NonProportional">Pesto</Emphasis> multivariate scheme, which was introduced by Calderini, Caminata, and Villa. In this scheme, the public polynomials are obtained by applying a CCZ transformation to a set of quadratic secret polynomials. As a consequence, the public key consists of polynomials of degree 4. In this work, we show that the public degree 4 polynomial system can be efficiently reduced to a system of quadratic polynomials. This seems to suggest that the CCZ transformation may not offer a significant increase in security, contrary to what was initially believed.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Cryptanalysis of a multivariate CCZ scheme

  • 期刊论文

  • 发表日期：

    2026年3月31日

查看全文
  • Alessio Caminata,
  • Elisa Gorla,
  • Madison Mabe,
  • Martina Vigorito,
  • Irene Villa

摘要

We consider the Pesto multivariate scheme, which was introduced by Calderini, Caminata, and Villa. In this scheme, the public polynomials are obtained by applying a CCZ transformation to a set of quadratic secret polynomials. As a consequence, the public key consists of polynomials of degree 4. In this work, we show that the public degree 4 polynomial system can be efficiently reduced to a system of quadratic polynomials. This seems to suggest that the CCZ transformation may not offer a significant increase in security, contrary to what was initially believed.