DeepAI AI Chat
Log In Sign Up

An Improvement of a Key Exchange Protocol Relying on Polynomial Maps

by   Keita Suzuki, et al.
The University of Tokyo

Akiyama et al. (Int. J. Math. Indust., 2019) proposed a post-quantum key exchange protocol that is based on the hardness of solving a system of multivariate non-linear polynomial equations but has a design strategy different from ordinary multivariate cryptography. However, their protocol has a drawback that the probability of failing to establish a common key is impractically high. In this paper, we improve the success probability of Akiyama et al.'s key exchange protocol significantly while keeping the security, by restricting each component of the correct common key from the whole of the coefficient field to its small subset. We give theoretical and experimental evaluations showing that our proposed parameter set for our protocol is expected to achieve both failure probability 2^-120 and 128-bit security level.


page 1

page 2

page 3

page 4


Composable Security of Distributed Symmetric Key Exchange Protocol

The Distributed Symmetric Key Exchange (DSKE) protocol provides secure s...

Measure-resend authenticated semi-quantum key distribution with single photons

Yu et al. and Li et al. have proposed the measure-resend protocols of au...

Remarks on a Tropical Key Exchange System

We consider a key-exchange protocol based on matrices over a tropical se...

Weak instances of SIDH variants under improved torsion-point attacks

SIDH is a post-quantum key exchange algorithm based on the presumed diff...

Collusion attack and counterattack on the quantum key agreement via non-maximally entangled cluster states

Recently, Li et al. (Int J Theor Phys: DOI: 10.1007/s10773-020-04588-w, ...

OpenSSLNTRU: Faster post-quantum TLS key exchange

Google's CECPQ1 experiment in 2016 integrated a post-quantum key-exchang...

Mistakes of A Popular Protocol Calculating Private Set Intersection and Union Cardinality and Its Corrections

In 2012, De Cristofaro et al. proposed a protocol to calculate the Priva...