Key-Recovery Fault Injection Attack on the Classic McEliece KEM

ePrint Report: Key-Recovery Fault Injection Attack on the Classic McEliece KEM

Sabine Pircher, Johannes Geier, Julian Danner, Daniel Mueller-Gritschneder, Antonia Wachter-Zeh

We present a key-recovery fault injection attack on the Classic McEliece Key Encapsulation Mechanism (KEM). The fault injections target the error-locator polynomial of the Goppa code and the validity checks in the decryption algorithm, making a chosen ciphertext attack possible. Faulty decryption outputs are used to generate a system of polynomial equations in the secret support elements of the …

attack eprint report injection key recovery