Abstract
We give upper bounds for the solving degree and the last fall degree of the polynomial system associated to the HFE (Hidden Field Equations) cryptosystem. Our bounds improve the known bounds for this type of systems. We also present new results on the connection between the solving degree and the last fall degree and prove that, in some cases, the solving degree is independent of coordinate changes.
Original language | English |
---|---|
Journal | Journal of Symbolic Computation |
Early online date | 8 Jul 2020 |
DOIs | |
Publication status | E-pub ahead of print - 8 Jul 2020 |
Keywords
- (Fake) Weil descent
- Gröbner bases
- HFE
- Last fall degree
- Multivariate cryptography
- Solving degree