"HILA5 pindakaas" : on the CCA security of lattice-based encryption with error correction

D.J. Bernstein; L.  Groot Bruinderink; T. Lange; L. Panny

"HILA5 pindakaas" : on the CCA security of lattice-based encryption with error correction

D.J. Bernstein, L. Groot Bruinderink, T. Lange, L. Panny

Onderzoeksoutput: Boek/rapport › Rapport › Academic

206 Downloads (Pure)

Samenvatting

We show that HILA5 is not secure against chosen-ciphertext attacks. Specifically, we demonstrate a key-recovery attack on HILA5 using an active attack on reused keys. The attack works around the error correction in HILA5. The attack applies to the HILA5 key-encapsulation mechanism (KEM), and also to the public-key encryption mechanism (PKE) obtained by NIST's procedure for combining the KEM with authenticated encryption. This contradicts the most natural interpretation of the IND-CCA security claim for HILA5.

Originele taal-2	Engels
Plaats van productie	s.l.
Uitgeverij	IACR
Aantal pagina's	14
Status	Gepubliceerd - 2017

Publicatie series

Naam	Cryptology ePrint Archive
Volume	2017/1214

Toegang tot document

publishers versionDefinitieve gepubliceerde versie, 435 KB

https://eprint.iacr.org/2017/1214

1 Conferentiebijdrage

HILA5 pindakaas: on the CCA security of lattice-based encryption with error correction
Bernstein, D. J., Groot Bruinderink, L., Lange, T. & Panny, L., 1 jan. 2018, Progress in Cryptology - AFRICACRYPT 2018: 10th International Conference on Cryptology in Africa, Marrakesh, Morocco, May 7–9, 2018, Proceedings. Joux, A., Nitaj, A. & Rachidi, T. (uitgave). Dordrecht: Springer, blz. 203-216 14 blz. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 10831 LNCS).
Onderzoeksoutput: Hoofdstuk in Boek/Rapport/Congresprocedure › Conferentiebijdrage › Academic › peer review

Open Access
14 Citaten (Scopus)

2 Downloads (Pure)

Citeer dit

@book{8e35c58ca9624a789d8004a72bf76e2d,

title = "{"}HILA5 pindakaas{"} : on the CCA security of lattice-based encryption with error correction",

abstract = "We show that HILA5 is not secure against chosen-ciphertext attacks. Specifically, we demonstrate a key-recovery attack on HILA5 using an active attack on reused keys. The attack works around the error correction in HILA5. The attack applies to the HILA5 key-encapsulation mechanism (KEM), and also to the public-key encryption mechanism (PKE) obtained by NIST's procedure for combining the KEM with authenticated encryption. This contradicts the most natural interpretation of the IND-CCA security claim for HILA5. ",

author = "D.J. Bernstein and {Groot Bruinderink}, L. and T. Lange and L. Panny",

year = "2017",

language = "English",

series = "Cryptology ePrint Archive",

publisher = "IACR",

}

TY - BOOK

T1 - "HILA5 pindakaas" : on the CCA security of lattice-based encryption with error correction

AU - Bernstein, D.J.

AU - Groot Bruinderink, L.

AU - Lange, T.

AU - Panny, L.

PY - 2017

Y1 - 2017

N2 - We show that HILA5 is not secure against chosen-ciphertext attacks. Specifically, we demonstrate a key-recovery attack on HILA5 using an active attack on reused keys. The attack works around the error correction in HILA5. The attack applies to the HILA5 key-encapsulation mechanism (KEM), and also to the public-key encryption mechanism (PKE) obtained by NIST's procedure for combining the KEM with authenticated encryption. This contradicts the most natural interpretation of the IND-CCA security claim for HILA5.

AB - We show that HILA5 is not secure against chosen-ciphertext attacks. Specifically, we demonstrate a key-recovery attack on HILA5 using an active attack on reused keys. The attack works around the error correction in HILA5. The attack applies to the HILA5 key-encapsulation mechanism (KEM), and also to the public-key encryption mechanism (PKE) obtained by NIST's procedure for combining the KEM with authenticated encryption. This contradicts the most natural interpretation of the IND-CCA security claim for HILA5.

M3 - Report

T3 - Cryptology ePrint Archive

BT - "HILA5 pindakaas" : on the CCA security of lattice-based encryption with error correction

PB - IACR

CY - s.l.

ER -

"HILA5 pindakaas" : on the CCA security of lattice-based encryption with error correction

Samenvatting

Publicatie series

Toegang tot document

Vingerafdruk

Onderzoekersoutput

HILA5 pindakaas: on the CCA security of lattice-based encryption with error correction

Citeer dit