Practical Key Recovery Attacks On Two McEliece Variants.

摘要: The McEliece cryptosystem is a promising alternative to conventional public key encryption systems like RSA and ECC. In particular, it supposed resist even attackers equipped with quantum computers. Moreover, the process requires only simple binary operations making good candidate for low cost devices RFID tags. However, McEliece's original scheme has drawback that keys are very large. Two variants have been proposed overcome this disadvantage. rst one due Berger et al. presented at AFRICACRYPT 2009 second Barreto Misoczki SAC 2009. paper we present general attack framework apply both schemes subsequently. Our allows us recover private most parameters by authors of within few days on single PC.