@article{oai:u-ryukyu.repo.nii.ac.jp:02008849,
 author = {Hashimoto, Yasufumi},
 issue = {1},
 journal = {IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences},
 month = {Jan},
 note = {In PQCrypto 2013, Yasuda, Takagi and Sakurai proposed a new signature scheme as one of multivariate public key cryptosystems (MPKCs). This scheme (called YTS) is based on the fact that there are two isometry classes of non-degenerate quadratic forms on a vector space with a prescribed dimension. The advantage of YTS is its efficiency. In fact, its signature generation is eight or nine times faster than Rainbow of similar size. For the security, it is known that the direct attack, the IP attack and the min-rank attack are applicable on YTS, and the running times are exponential time for the first and the second attacks and subexponential time for the third attack. In the present paper, we give a new attack on YTS using an approach similar to the diagonalization of a matrix. Our attack works in polynomial time and it actually recovers equivalent secret keys of YTS having 140-bits security againt min-rank attack in several minutes., 論文},
 pages = {58--65},
 title = {Cryptanalysis of the Multivariate Signature Scheme Proposed in PQCrypto 2013},
 volume = {E99-A},
 year = {2016}
}