Cryptanalysis of a multivariate CCZ scheme
Cryptography and Security
2025-07-22 v1 Symbolic Computation
Abstract
We consider the multivariate scheme Pesto, which was introduced by Calderini, Caminata, and Villa. In this scheme, the public polynomials are obtained by applying a CCZ transformation to a set of quadratic secret polynomials. As a consequence, the public key consists of polynomials of degree 4. In this work, we show that the public degree 4 polynomial system can be efficiently reduced to a system of quadratic polynomials. This seems to suggest that the CCZ transformation may not offer a significant increase in security, contrary to what was initially believed.
Cite
@article{arxiv.2507.15449,
title = {Cryptanalysis of a multivariate CCZ scheme},
author = {Alessio Caminata and Elisa Gorla and Madison Mabe and Martina Vigorito and Irene Villa},
journal= {arXiv preprint arXiv:2507.15449},
year = {2025}
}
Comments
are welcome!