论文信息 - Can One Design a Signature Scheme Based on Error-Correctin Codes?

Can One Design a Signature Scheme Based on Error-Correctin Codes?

In this note, we show that the signature scheme based on error-correcting codes which has been proposed during the ASIACRYPT'94 conference and appears in this volume (see [1]) is not secure. The attack involves gathering a few hundred signatures. ⩉From then on, only elementary linear algebra is used.

Jacques Stern | J. Stern

[1] Amos Fiat,et al. How to Prove Yourself: Practical Solutions to Identification and Signature Problems , 1986, CRYPTO.

[2] Stephen B. Wicker,et al. A Digital Signature Scheme Based on Linear Error-correcting Block Codes , 1994, ASIACRYPT.

[3] Jacques Stern,et al. A New Identification Scheme Based on Syndrome Decoding , 1993, CRYPTO.

[4] Robert J. McEliece,et al. A public key cryptosystem based on algebraic coding theory , 1978 .