An Optimization of Weak Key Attacks Based on the BGF Decoding Algorithm
Source abstract
Abstract
Among the four candidate algorithms in the fourth round of NIST standardization, the BIKE (Bit Flipping Key Encapsulation) scheme has a small key size and high efficiency, showing good prospects for application. However, the BIKE scheme based on QC-MDPC (Quasi Cyclic Medium Density Parity Check) codes still faces challenges such as the GJS attack and weak key attacks targeting the decoding failure rate (DFR). This paper analyzes the BGF decoding algorithm of the BIKE scheme, revealing two deep factors that lead to DFR, and proposes a weak key optimization attack method for the BGF decoding algorithm based on these two factors. The proposed method constructs a new weak key set, and experiment results eventually indicate that, considering BIKE’s parameter set targeting 128-bit security, the average decryption failure rate is lowerly bounded by . This result not only highlights a significant vulnerability in the BIKE scheme but also provides valuable insights for future improvements in its design. By addressing these weaknesses, the robustness of QC-MDPC code-based cryptographic systems can be enhanced, paving the way for more secure post-quantum cryptographic solutions.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (27)
Show source-provided references
1. Post-quantum security: opportunities and challenges10.3390/s23218744 ↗
2. Algorithms for quantum computation: discrete logarithms and factoring
3. Alagic · Status report on the third round of the NIST post-quantum cryptography standardization process · 2022
4. Code-based cryptography: state of the art and perspectives10.1109/MSP.2017.3151345 ↗
5. QC-MDPC decoders with several shades of gray
6. Aragon N, Barreto P, Bettaieb S, Bidoux L, Blazy O, Deneuville JC, et al. BIKE: bit flipping key encapsulation; 2022 [cited 2025 Apr 15]. Available from: https://bikesuite.org/files/v4.2/BIKE_Spec.2021.09.29.1.pdf.
7. A key recovery attack on MDPC with CCA security using decoding errors
8. Exploring decryption failures of BIKE: new class of weak keys and key recovery attacks
9. QC-MDPC: a timing attack and a CCA2 KEM
10. A key recovery reaction attack on QC-MDPC10.1109/TIT.2018.2877458 ↗
11. Nilsson A, Johansson T, Wagner PS. Error amplification in code-based cryptography. Cryptology ePrint Archive; 2018. doi:10.13154/tches.v2019.i1.238-258.10.46586/tches.v2019.i1.238-258 ↗
12. Drucker N, Gueron S, Kostic D. On constant-time QC-MDPC decoding with negligible failure rate. Cryptology ePrint Archive; 2019 [cited 2025 Apr 15]. Available from: https://eprint.iacr.org/2017/604.
13. Knapsack-type cryptosystems and algebraic coding theory
14. Secure integration of asymmetric and symmetric encryption schemes
15. A designer’s guide to KEMs
16. A modular analysis of the Fujisaki-Okamoto transformation
17. Low-density parity-check codes10.1109/TIT.1962.1057683 ↗
18. Vasseur V. QC-MDPC codes DFR and the IND-CCA security of bike; 2022 [cited 2025 Apr 15]. Available from: https://ia.cr/2021/1458.
19. Sendrier N, Vasseur V. On the decoding failure rate of QC-MDPC bit-flipping decoders. In: Ding J, Steinwandt R, editors. Post-quantum cryptography. Cham: Springer; 2019. Vol. 11505. p. 404–16.10.1007/978-3-030-25510-7_22 ↗
20. About low DFR for QC-MDPC decoding
21. Vasseur · Post-quantum cryptography: a study of the decoding of QC-MDPC codes · 2021
22. A closer look at the Guo-Johansson–Stankovski attack against QC-MDPC codes
23. Sendrier N, Vasseur V. On the existence of weak keys for QC-MDPC decoding; 2020 [cited 2025 Apr 15]. Available from: https://ia.cr/2020/1232.10.1007/978-3-030-44223-1_2 ↗
24. Weak-key analysis for bike post-quantum key encapsulation mechanism10.1109/TIFS.2023.3264153 ↗
25. Sendrier N. Secure sampling of constant-weight words–application to bike. Cryptology ePrint Archive; 2021 [cited 2025 Apr 15]. Available from: https://ia.cr/2021/1631.
26. A study of error floor behavior in QC-MDPC codes
27. Weak keys for the quasi-cyclic MDPC public key encryption scheme