Practical Cryptanalysis of SFLASH

Paper 2007/141

Practical Cryptanalysis of SFLASH

Vivien Dubois, Pierre-Alain Fouque, Adi Shamir, and Jacques Stern

Abstract

In this paper, we present a practical attack on the signature scheme SFLASH proposed by Patarin, Goubin and Courtois in 2001 following a design they had introduced in 1998. The attack only needs the public key and requires about one second to forge a signature for any message, after a one-time computation of several minutes. It can be applied to both SFLASHv2 which was accepted by NESSIE, as well as to SFLASHv3 which is a higher security version.

@misc{cryptoeprint:2007/141,
      author = {Vivien Dubois and Pierre-Alain Fouque and Adi Shamir and Jacques Stern},
      title = {Practical Cryptanalysis of {SFLASH}},
      howpublished = {Cryptology {ePrint} Archive, Paper 2007/141},
      year = {2007},
      url = {https://eprint.iacr.org/2007/141}
}