Post-Quantum Cryptography

529 Pages·2018·12.226 MB·English

by  Tanja Lange, Rainer Steinwandt

Tanja Lange · Rainer Steinwandt (Eds.)
6
8 Post-Quantum
7
0
1

S
Cryptography
C
N
L
9th International Conference, PQCrypto 2018
Fort Lauderdale, FL, USA, April 9–11, 2018
Proceedings
123
Lecture Notes in Computer Science 10786
Commenced Publication in 1973
Founding and Former Series Editors:
Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen
Editorial Board
David Hutchison
Lancaster University, Lancaster, UK
Takeo Kanade
Carnegie Mellon University, Pittsburgh, PA, USA
Josef Kittler
University of Surrey, Guildford, UK
Jon M. Kleinberg
Cornell University, Ithaca, NY, USA
Friedemann Mattern
ETH Zurich, Zurich, Switzerland
John C. Mitchell
Stanford University, Stanford, CA, USA
Moni Naor
Weizmann Institute of Science, Rehovot, Israel
C. Pandu Rangan
Indian Institute of Technology Madras, Chennai, India
Bernhard Steffen
TU Dortmund University, Dortmund, Germany
Demetri Terzopoulos
University of California, Los Angeles, CA, USA
Doug Tygar
University of California, Berkeley, CA, USA
Gerhard Weikum
Max Planck Institute for Informatics, Saarbrücken, Germany
More information about this series at http://www.springer.com/series/7410
Tanja Lange Rainer Steinwandt (Eds.)
(cid:129)
Post-Quantum
Cryptography
9th International Conference, PQCrypto 2018
–
Fort Lauderdale, FL, USA, April 9 11, 2018
Proceedings
123
Editors
TanjaLange RainerSteinwandt
Technische Universiteit Eindhoven Florida Atlantic University
Eindhoven Boca Raton,FL
TheNetherlands USA
ISSN 0302-9743 ISSN 1611-3349 (electronic)
Lecture Notesin Computer Science
ISBN 978-3-319-79062-6 ISBN978-3-319-79063-3 (eBook)
https://doi.org/10.1007/978-3-319-79063-3
LibraryofCongressControlNumber:2018937396
LNCSSublibrary:SL4–SecurityandCryptology
©SpringerInternationalPublishingAG,partofSpringerNature2018
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbookare
believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors
give a warranty, express or implied, with respect to the material contained herein or for any errors or
omissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictionalclaimsin
publishedmapsandinstitutionalaffiliations.
Printedonacid-freepaper
ThisSpringerimprintispublishedbytheregisteredcompanySpringerInternationalPublishingAG
partofSpringerNature
Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland
Preface
PQCrypto2018,the9thInternationalConferenceonPost-QuantumCryptography,was
held in Fort Lauderdale, Florida, USA, during April 9–11, 2018.
TheaimofthePQCryptoconferenceseriesistoserveasaforumforresearchersto
presentresultsandexchangeideasoncryptographyinanerawithlarge-scalequantum
computers.
PQCrypto2018wasco-locatedwithNIST’sFirstPQCStandardizationConference
(April 11–13, 2018) in Fort Lauderdale, Florida. Following the same model as its
predecessor,PQCrypto2018adoptedatwo-stagesubmissionprocessinwhichauthors
registered their paper one week before the final submission deadline.
Theconferencereceived97submissionswithauthorsfrom30countries.Eachpaper
(thathadnotbeenwithdrawnbytheauthors) wasreviewedinprivate byatleastthree
ProgramCommitteemembers.Theprivatereviewphasewasfollowedbyanintensive
discussionphase,conductedonline.Attheendofthisprocess,theProgramCommittee
selected 24 papers for inclusion in the technical program and publication in these
proceedings. The accepted papers cover a broad spectrum of research within the
conference’s scope, including code-, hash-, isogeny-, and lattice-based cryptography,
multivariate cryptography, and quantum cryptanalysis.
Along with the 24 contributed technical presentations, the program featured out-
standing invited talks and a presentation on NIST’s post-quantum cryptography
standardization.
Organizingandrunningthisyear’seditionofthePQCryptoconferenceserieswasa
team effort, and we are indebted to everyone who helped make PQCrypto 2018 a
success.Inparticular,wewouldlikethankallmembersoftheProgramCommitteeand
theexternalreviewerswhowerevitalforcompilingthetechnicalprogram.Evaluating
and discussing the submissions was a labor-intense task, and we truly appreciate the
work that went into this. We also owe a big thank you to Maria Provost from Florida
Atlantic University, who made sure that all local arrangements fell into place as
needed.
February 2018 Tanja Lange
Rainer Steinwandt
PQCrypto 2018
9th International Conference
on Post-Quantum Cryptography
Fort Lauderdale, Florida, USA
April 9–11, 2018
Program Chairs
Tanja Lange Technische Universiteit Eindhoven, The Netherlands
Rainer Steinwandt Florida Atlantic University, USA
Steering Committee
Daniel J. Bernstein University of Illinois at Chicago, USA
Johannes Buchmann Technische Universität Darmstadt, Germany
Claude Crépeau McGill University, Canada
Jintai Ding University of Cincinnati, USA
Philippe Gaborit University of Limoges, France
Tanja Lange Technische Universiteit Eindhoven, The Netherlands
Daniele Micciancio University of California at San Diego, USA
Michele Mosca University of Waterloo, Canada
Nicolas Sendrier Inria, France
Tsuyoshi Takagi Kyushu University and University of Tokyo, Japan
Bo-Yin Yang Academia Sinica, Taiwan
Program Committee
Gorjan Alagic University of Maryland, USA
Shi Bai Florida Atlantic University, USA
Lejla Batina Radboud University, The Netherlands
Daniel J. Bernstein University of Illinois at Chicago, USA
Joppe Bos NXP Semiconductors, Belgium
Johannes Buchmann Technische Universität Darmstadt, Germany
Wouter Castryck KU Leuven, Belgium
Pierre-Louis Cayrel Université Jean Monnet de Saint-Etienne, France
Chen-Mou Cheng Osaka University, Japan
Jung Hee Cheon Seoul National University, Korea
Andrew Childs University of Maryland, USA
Jintai Ding University of Cincinnati, USA
Thomas Eisenbarth Universität zu Lübeck, Germany and Worcester
Polytechnic Institute, USA
VIII PQCrypto 2018
Scott Fluhrer Cisco Systems, USA
Philippe Gaborit Université Limoges, France
Tommaso Gagliardoni IBM Research, Switzerland
Kris Gaj George Mason University, USA
Steven Galbraith Auckland University, New Zealand
Tim Güneysu Ruhr-Universität Bochum and DFKI, Germany
Sean Hallgren Pennsylvania State University, USA
Yasufumi Hashimoto University of the Ryukyus, Japan
Andreas Hülsing Technische Universiteit Eindhoven, The Netherlands
David Jao University of Waterloo and evolutionQ, Inc., Canada
Stacey Jeffery CWI and QuSoft, The Netherlands
Thomas Johansson Lund University, Sweden
Kwangjo Kim KAIST, Korea
Stefan Kölbl Technical University of Denmark, Denmark
Tancrède Lepoint SRI International, USA
Yi-Kai Liu NIST, USA
Michele Mosca UniversityofWaterlooandPerimeterInstitute,Canada
Michael Naehrig Microsoft Research, USA
María Naya-Plasencia Inria, France
Ruben Niederhagen Fraunhofer SIT, Germany
Edoardo Persichetti Florida Atlantic University, USA
Thomas Pöppelmann Infineon Technologies, Germany
Christian Rechberger University of Graz, Austria
Martin Roetteler Microsoft Research, USA
Alexander Russell University of Connecticut, USA
Simona Samardjiska Radboud Universiteit, The Netherlands and Ss. Cyril
and Methodius University, Macedonia
Peter Schwabe Radboud Universiteit, The Netherlands
Nicolas Sendrier Inria, France
Daniel Smith-Tone NIST and University of Louisville, USA
Fang Song Portland State University, USA
Douglas Stebila McMaster University, Canada
Damien Stehlé ENS de Lyon, France
Krysta Svore Microsoft Research, USA
Tsuyoshi Takagi Kyushu University and University of Tokyo, Japan
Jean-Pierre Tillich Inria, France
Christine van Vredendaal Technische Universiteit Eindhoven, The Netherlands
William Whyte OnBoard Security, USA
Keita Xagawa NTT, Japan
Bo-Yin Yang Academia Sinica, Taiwan
Zhang Zhenfeng Chinese Academy of Sciences, China
PQCrypto 2018 IX
External Reviewers
Martin R. Albrecht Seungwan Hong Chris Peikert
Jacob Alperin-Sheriff Yasuhiko Ikematsu Geovandro Pereira
Koichiro Akiyama Ilia Iliashenko Ray Perlner
Reza Azarderakhsh Brian Jarvis Peter Pessl
Gustavo Banegas Haodong Jiang Christophe Petit
Ward Beullens Jinhyuck Jeong Albrecht Petzoldt
Jean-Francois Biasse Stephen Jordan Alexander Poremba
Nina Bindel Elif Bilge Kavun Youming Qiao
Cecilia Boschini Andrey Kim Somindu C. Ramanna
Charles Bouillaguet Duhyeong Kim Joost Renes
Kevin Carrier Jae-yun Kim Adeline Roux-Langlois
Ryann Cartor Jiseung Kim Paolo Santini
Cong Chen Elena Kirshanova Pascal Sasdrich
Long Chen Jean Belo Klamti John Schanck
Rakyong Choi Norman Lahr Kevin Schmidt
Tung Chou Joohee Lee Gregor Seiler
Craig Costello Jason LeGrow Yongha Son
Joan Daemen Matthieu Lequesne Yongsoo Song
Viet Ba Dang Aaron Lye Vladimir Soukharev
Thomas Debris-Alazard Christian Majenz Paul Stankovski
Luca De Feo Chloe Martindale Alan Szepieniec
Javad Doliskani Pedro Maat Massolino Mostafa Taha
Léo Ducas Dustin Moody Atsushi Takayasu
Dung Hoang Duong Travis Morrison Guofeng Tang
Kirsten Eisentraeger Koksal Mus Yan Bo Ti
Ahmed Ferozpuri Duc Tri Nguyen Patrick Towa
Xinwei Gao Khoa Nguyen Nguenewou
Nicholas Genise Phong Nguyen Jeremy Vates
Vlad Gheorghiu Xuyun Nie Valentin Vasseur
Lorenzo Grassi Tobias Oder Yacheng Wang
Kyoohyung Han Ayoub Otmani Weiqiang Wen
Christian Hanser Yanbin Pan Shih-Chun You
Minki Hhan Lorenz Panny Mark Zhandry
Contents
Code-Based Cryptography
LEDAkem: A Post-quantum Key Encapsulation Mechanism Based
on QC-LDPC Codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
MarcoBaldi,AlessandroBarenghi,FrancoChiaraluce,GerardoPelosi,
and Paolo Santini
Decoding Linear Codes with High Error Rate and Its Impact
for LPN Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Leif Both and Alexander May
QC-MDPC: A Timing Attack and a CCA2 KEM . . . . . . . . . . . . . . . . . . . . 47
Edward Eaton, Matthieu Lequesne, Alex Parent, and Nicolas Sendrier
FPGA-Based Niederreiter Cryptosystem Using Binary Goppa Codes. . . . . . . 77
Wen Wang, Jakub Szefer, and Ruben Niederhagen
Cryptanalysis
Attacks on the AJPS Mersenne-Based Cryptosystem. . . . . . . . . . . . . . . . . . 101
Koen de Boer, Léo Ducas, Stacey Jeffery, and Ronald de Wolf
ImplementingJoux-Vitse’sCrossbredAlgorithmforSolvingMQSystems
over F on GPUs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
2
Ruben Niederhagen, Kai-Chun Ning, and Bo-Yin Yang
Practical Cryptanalysis of a Public-Key Encryption Scheme Based
on Non-linear Indeterminate Equations at SAC 2017. . . . . . . . . . . . . . . . . . 142
Keita Xagawa
Hash-Based Cryptography
Grafting Trees: A Fault Attack Against the SPHINCS Framework. . . . . . . . . 165
Laurent Castelnovi, Ange Martinelli, and Thomas Prest
Post-quantum Security of the Sponge Construction . . . . . . . . . . . . . . . . . . . 185
Jan Czajkowski, Leon Groot Bruinderink, Andreas Hülsing,
Christian Schaffner, and Dominique Unruh
Putting Wings on SPHINCS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
Stefan Kölbl