Skip to content

Multi-Instance Security Degradation of Code-Based KEMs

2026 · IACR Cryptology ePrint Archive · Vol 2026, pp. 517 · 0 citations · 11 references
Computer Science

TL;DR

It is shown that in a BIKE multi-instance setting an attacker can construct a DOOM instance with nM syndromes, and multi-instance security of code-based KEMs degrades as a function of M.

View source

Similar papers

Open access Sep 2026

BB84 with ML-KEM Decapsulation-Failure-Based Security Parameters

This paper suggests that as a key exchange mechanism, BB84 should be run with security parameters comparable to those of ML-KEM, and analyzes performance implications if this choice is taken, and offers general guidelines for BB84 parameter selection.

Sara Nikula, Mari Muurman · 0 citations
Open access Sep 2026

From Multiplication to Recovery: A Single-trace Side-Channel Attack on HQC

Hamming Quasi-Cyclic (HQC) has been selected by NIST as a standard for code-based Post-Quantum Cryptography (PQC) Key Encapsulation Mechanisms (KEMs). While HQC offers robust theoretical security based on the Decisional Quasi- Cyclic Syndrome Decoding problem, its physical implementation is vulnerable to side-channel a...

Yi-Kang Guo, Yu-Chang Hu, Yan-Bin Li et al. · 0 citations
Preprint Aug 2026

Decisional Monogamy-of-Entanglement for Coset States and Applications to Unclonable Cryptography with Correlated Challenges

A main application of quantum information in cryptography is copy-protection, where we encode a functionality (such as a decryption key or software) into a reusable quantum state so that it cannot be split into two adversaries (called freeloaders) that both remain useful. Previous works have only shown security for ind...

Amit Behera, Alper Çakan, Vipul Goyal · 0 citations
Preprint Sep 2026

How to break the Miranda signature scheme over matrix Gabidulin codes

The Miranda signature scheme relies on masking a matrix code which disposes of a masked underlying structure, and the knowledge of which allows for efficient error decoding. We consider a Gabidulin code which is expanded into a matrix code, that is only \Fq-linear. An additional masking is then applied to it. The attac...

Adrien Vinçotte · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.