The problem with the SURF scheme
Cryptography and Security
2017-12-01 v4
Abstract
There is a serious problem with one of the assumptions made in the security proof of the SURF scheme. This problem turns out to be easy in the regime of parameters needed for the SURF scheme to work. We give afterwards the old version of the paper for the reader's convenience.
Cite
@article{arxiv.1706.08065,
title = {The problem with the SURF scheme},
author = {Thomas Debris-Alazard and Nicolas Sendrier and Jean-Pierre Tillich},
journal= {arXiv preprint arXiv:1706.08065},
year = {2017}
}
Comments
Warning : we found a serious problem in the security proof of the SURF scheme. We explain this problem here and give the old version of the paper afterwards