Preliminary Cryptanalysis of the Biscuit Signature Scheme

ePrint Report: Preliminary Cryptanalysis of the Biscuit Signature Scheme

Charles Bouillaguet, Julia Sauvage

Biscuit is a recent multivariate signature scheme based on the MPC-in-the-Head paradigm. It has been submitted to the NIST competition for additional signature schemes. Signatures are derived from a zero-knowledge proof of knowledge of the solution of a structured polynomial system. This extra structure enables efficient proofs and compact signatures. This short note demonstrates that it also makes these polynomial systems easier to solve than random ones. …

competition cryptanalysis eprint report head knowledge mpc nist paradigm proof report signature signatures solution