{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,11]],"date-time":"2026-11-11T02:26:05Z","timestamp":1794363965641,"version":"4.9.0"},"publisher-location":"Berlin, Heidelberg","reference-count":85,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540938057","type":"print"},{"value":"9783540938064","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009]]},"DOI":"10.1007\/978-3-540-93806-4_15","type":"book-chapter","created":{"date-parts":[[2009,5,19]],"date-time":"2009-05-19T19:17:38Z","timestamp":1242760658000},"page":"263-283","source":"Crossref","is-referenced-by-count":9,"title":["Overview of Cryptanalysis Techniques in\u00a0Multivariate Public Key Cryptography"],"prefix":"10.1007","author":[{"given":"Olivier","family":"Billet","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jintai","family":"Ding","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2009,5,21]]},"reference":[{"key":"15_CR1","series-title":"LNCS","first-page":"338","volume-title":"Proc. of Asiacrypt\u00a02004","author":"G. Ars","year":"2004","unstructured":"G. Ars, J.\u00a0C. Faug\u00e8re, H. Imai, M. Kawazoe, and M. Sugita, Comparison between XL and Gr\u00f6bner basis algorithms, Proc. of Asiacrypt\u00a02004 (P.\u00a0J. Lee, ed.), LNCS, vol.\u00a03329, Springer, Berlin, 2004, pp.\u00a0338\u2013353."},{"key":"15_CR2","unstructured":"M. Bardet, An investigation on overdetermined algebraic systems and applications to error-correcting codes and to cryptography, Ph.D. thesis, University of Paris 6, Paris, France, 2004."},{"key":"15_CR3","series-title":"LNCS","first-page":"254","volume-title":"FSE\u00a02007","author":"C. Berbain","year":"2007","unstructured":"C. Berbain and H. Gilbert, On the security of IV dependent stream ciphers, FSE\u00a02007 (A. Biryukov, ed.), LNCS, vol.\u00a04593, Springer, Berlin, 2007, pp.\u00a0254\u2013273."},{"key":"15_CR4","series-title":"LNCS","first-page":"109","volume-title":"EUROCRYPT\u00a02006","author":"C. Berbain","year":"2006","unstructured":"C. Berbain, H. Gilbert, and J. Patarin, QUAD: A practical stream cipher with provable security, EUROCRYPT\u00a02006 (S. Vaudenay, ed.), LNCS, vol.\u00a04004, Springer, Berlin, 2006, pp.\u00a0109\u2013128."},{"key":"15_CR5","series-title":"LNCS","first-page":"331","volume-title":"Asiacrypt\u00a02003","author":"O. Billet","year":"2003","unstructured":"O. Billet and H. Gilbert, A traceable block cipher, Asiacrypt\u00a02003 (C.\u00a0S. Laih, ed.), LNCS, vol.\u00a02894, Springer, Berlin, 2003, pp.\u00a0331\u2013346."},{"key":"15_CR6","series-title":"LNCS","first-page":"336","volume-title":"SCN\u00a02006","author":"O. Billet","year":"2006","unstructured":"O. Billet and H. Gilbert, Cryptanalysis of Rainbow, SCN\u00a02006 (R.\u00a0De Prisco and M. Yung, eds.), LNCS, vol.\u00a04116, Springer, Berlin, 2006, pp.\u00a0336\u2013347."},{"key":"15_CR7","series-title":"LNCS","first-page":"82","volume-title":"ACISP\u00a02007","author":"O. Billet","year":"2007","unstructured":"O. Billet, M.\u00a0J.\u00a0B. Robshaw, and T. Peyrin, On building hash functions from multivariate quadratic equations, ACISP\u00a02007 (J. Pieprzyk, H. Ghodosi and E. Dawson, eds.), LNCS, vol.\u00a04586, Springer, Berlin, 2007, pp.\u00a082\u201395."},{"key":"15_CR8","unstructured":"O. Billet, J. Patarin, and Y. Seurin, Analysis of Intermediate Field Systems, SCC\u00a02008 (D.\u00a0Wang and J.-C. Faug\u00e8re, eds.), 2008."},{"key":"15_CR9","series-title":"LNCS","first-page":"33","volume-title":"Eurocrypt\u00a02003","author":"A. Biryukov","year":"2003","unstructured":"A. Biryukov, B. Preneel, A. Braeken, and C. de\u00a0Canni\u00e8re, A toolbox for cryptanalysis: linear and affine equivalence algorithms, Eurocrypt\u00a02003 (E. Biham, ed.), LNCS, vol.\u00a02656, Springer, Berlin, 2003, pp.\u00a033\u201350."},{"key":"15_CR10","doi-asserted-by":"crossref","unstructured":"A. Braeken, B. Preneel, and C. Wolf, A study of the security of unbalanced Oil & Vinegar signature schemes, CT-RSA\u00a02005 (A.\u00a0Menezes, ed.), LNCS, vol.\u00a03376, 2005, p.\u00a029.","DOI":"10.1007\/978-3-540-30574-3_4"},{"key":"15_CR11","unstructured":"B. Buchberger, Ein Algorithmus zum Auffinden der Basiselemente des Restklassenringes nach einem nulldimensionalen Polynomideal, Ph.D. thesis, Innsbruck, 1965."},{"key":"15_CR12","doi-asserted-by":"publisher","first-page":"374","DOI":"10.1007\/BF01844169","volume":"4","author":"B. Buchberger","year":"1970","unstructured":"B. Buchberger, Ein algorithmisches Kriterium f\u00fcr die L\u00f6sbarkeit eines algebraischen Gleichungssystems, Aequationes Math. 4 (1970), 374\u2013383.","journal-title":"Aequationes Math."},{"key":"15_CR13","doi-asserted-by":"publisher","first-page":"184","DOI":"10.1007\/978-94-009-5225-6_6","volume-title":"Multidimensional systems theory","author":"B. Buchberger","year":"1985","unstructured":"B. Buchberger, Gr\u00f6bner-bases: An algorithmic method in polynomial ideal theory, Multidimensional systems theory, Reidel, Dordrecht, 1985, pp.\u00a0184\u2013232."},{"key":"15_CR14","first-page":"535","volume":"251","author":"B. Buchberger","year":"1998","unstructured":"B. Buchberger, An algorithmical criterion for the solvability of algebraic systems of equations, London Math. Soc. LNS 251 (1998), 535\u2013545.","journal-title":"London Math. Soc. LNS"},{"issue":"3\u20134","key":"15_CR15","doi-asserted-by":"publisher","first-page":"475","DOI":"10.1016\/j.jsc.2005.09.007","volume":"41","author":"B. Buchberger","year":"2006","unstructured":"B. Buchberger, Bruno Buchberger\u2019s PhD thesis 1965: An algorithm for finding the basis elements of the residue class ring of a zero dimensional polynomial ideal, J. Symb. Comput. 41 (2006), nos.\u00a03\u20134, 475\u2013511.","journal-title":"J. Symb. Comput."},{"issue":"3","key":"15_CR16","doi-asserted-by":"publisher","first-page":"572","DOI":"10.1006\/jcss.1998.1608","volume":"58","author":"J.\u00a0F. Buss","year":"1999","unstructured":"J.\u00a0F. Buss, G.\u00a0S. Frandsen, and J.\u00a0O. Shallit, The computational complexity of some problems of linear algebra, J. Comput. Syst. Sci. 58 (1999), no.\u00a03, 572\u2013596.","journal-title":"J. Comput. Syst. Sci."},{"key":"15_CR17","volume-title":"Proc. of ISSAC\u00a02008","author":"M. Caboara","year":"2008","unstructured":"M. Caboara, F. Caruso, and C. Traverso, Gr\u00f6bner bases for public key cryptography, Proc. of ISSAC\u00a02008 (L. Gonzalez-Vega, ed.), ACM, New York, 2008."},{"key":"15_CR18","series-title":"LNCS","first-page":"435","volume-title":"CRYPTO93","author":"D. Coppersmith","year":"1993","unstructured":"D. Coppersmith, J. Stern, and S. Vaudenay, Attacks on the birational permutation signature schemes, CRYPTO93 (D.\u00a0R. Stinson, ed.), LNCS, vol.\u00a0773, Springer, Berlin, 1993, pp.\u00a0435\u2013443."},{"issue":"3","key":"15_CR19","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/s001459900028","volume":"10","author":"D. Coppersmith","year":"1997","unstructured":"D. Coppersmith, J. Stern, and S. Vaudenay, The security of the birational permutation signature schemes, Journal of Cryptology 10 (1997), no.\u00a03, 207\u2013221.","journal-title":"Journal of Cryptology"},{"key":"15_CR20","series-title":"LNCS","first-page":"266","volume-title":"Proc. of CT-RSA\u00a02001","author":"N.\u00a0T. Courtois","year":"2001","unstructured":"N.\u00a0T. Courtois, The security of Hidden Field Equations (HFE), Proc. of CT-RSA\u00a02001 (D. Naccache, ed.), LNCS, vol.\u00a02020, Springer, Berlin, 2001, pp.\u00a0266\u2013281."},{"key":"15_CR21","series-title":"LNCS","first-page":"345","volume-title":"EUROCRYPT\u00a02003","author":"N. Courtois","year":"2003","unstructured":"N. Courtois and W. Meier, Algebraic attacks on stream ciphers with linear feedback, EUROCRYPT\u00a02003 (E. Biham, ed.), LNCS, vol.\u00a02656, Springer, Berlin, 2003, pp.\u00a0345\u2013359."},{"key":"15_CR22","series-title":"LNCS","first-page":"392","volume-title":"Proc. of EUROCRYPT\u00a02000","author":"N. Courtois","year":"2000","unstructured":"N. Courtois, A. Klimov, J. Patarin, and A. Shamir, Efficient algorithms for solving overdefined systems of multivariate polynomial equations, Proc. of EUROCRYPT\u00a02000, LNCS, vol.\u00a01807, Springer, Berlin, 2000, pp.\u00a0392\u2013407."},{"key":"15_CR23","unstructured":"M.\u00a0T. Dickerson, The functional decomposition of polynomials, Ph.D. thesis, Cornell University, Ithaca, NY, USA, 1989."},{"key":"15_CR24","volume-title":"History of the theory of numbers","author":"L.\u00a0E. Dickson","year":"1971","unstructured":"L.\u00a0E. Dickson, History of the theory of numbers, vol.\u00a03, Chelsea, New York, 1971."},{"key":"15_CR25","unstructured":"J. Ding and J.\u00a0E. Gower, Inoculating multivariate schemes against differential attacks, Cryptology ePrint Archive, Report 2005\/255, 2005."},{"key":"15_CR26","unstructured":"J. Ding and D. Schmidt, A defect of the implementation schemes of the TTM cryptosystem, Cryptology ePrint Archive, Report 2003\/085, 2003."},{"key":"15_CR27","first-page":"113","volume":"23","author":"J. Ding","year":"2004","unstructured":"J. Ding and D. Schmidt, The new implementation schemes of the TTM cryptosystem are not secure, Progr. Comput. Sci. Appl. Logic 23 (2004), 113\u2013127.","journal-title":"Progr. Comput. Sci. Appl. Logic"},{"key":"15_CR28","series-title":"LNCS","first-page":"164","volume-title":"ACNS\u00a02005","author":"J. Ding","year":"2005","unstructured":"J. Ding and D. Schmidt, Rainbow, a new multivariable polynomial signature scheme, ACNS\u00a02005 (J. Ioannidis, A.\u00a0D. Keromytis and M. Yung, eds.), LNCS, vol.\u00a03531, Springer, Berlin, 2005a, pp.\u00a0164\u2013175."},{"key":"15_CR29","series-title":"LNCS","first-page":"288","volume-title":"PKC\u00a02005","author":"J. Ding","year":"2005","unstructured":"J. Ding and D. Schmidt, Cryptanalysis of HVEv and internal perturbation of HFE, PKC\u00a02005 (S. Vaudenay, ed.), LNCS, vol.\u00a03386, Springer, Berlin, 2005b, p.\u00a0288."},{"key":"15_CR30","series-title":"LNCS","volume-title":"PKC\u00a02007","author":"J. Ding","year":"2007","unstructured":"J. Ding, L. Hu, X. Nie, J. Li, and J. Wagner, High order linearization equation (HOLE) attack on multivariate public key cryptosystems, PKC\u00a02007 (T. Okamoto and X. Wang, eds.), LNCS, Springer, Berlin, 2007a."},{"key":"15_CR31","series-title":"LNCS","first-page":"266","volume-title":"PKC\u00a02007","author":"J. Ding","year":"2007","unstructured":"J. Ding, C. Wolf, and B.-Y. Yang, \u2113 -invertible cycles for multivariate quadratic (MQ) public key cryptography, PKC\u00a02007 (T. Okamoto and X. Wang, eds.), LNCS, vol.\u00a04450, Springer, Berlin, 2007b, pp.\u00a0266\u2013281."},{"key":"15_CR32","series-title":"LNCS","first-page":"1","volume-title":"CRYPTO\u00a02007","author":"V. Dubois","year":"2007","unstructured":"V. Dubois, P.-A. Fouque, A. Shamir, and J. Stern, Practical cryptanalysis of SFLASH, CRYPTO\u00a02007 (A. Menezes, ed.), LNCS, vol.\u00a04622, Springer, Berlin, 2007a, pp.\u00a01\u201312."},{"key":"15_CR33","series-title":"LNCS","volume-title":"PKC\u00a02007","author":"V. Dubois","year":"2007","unstructured":"V. Dubois, L. Granboulan, and J. Stern, Cryptanalysis of HFE with internal perturbation, PKC\u00a02007 (T. Okamoto and X. Wang, eds.), LNCS, vol.\u00a03494, Springer, Berlin, 2007b."},{"issue":"1\u20133","key":"15_CR34","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1016\/S0022-4049(99)00005-5","volume":"139","author":"J.\u00a0C. Faug\u00e9re","year":"1999","unstructured":"J.\u00a0C. Faug\u00e9re, A new efficient algorithm for computing Gr\u00f6bner bases (F 4), J. Pure Appl. Algebra 139 (1999), nos.\u00a01\u20133, 61\u201388.","journal-title":"J. Pure Appl. Algebra"},{"key":"15_CR35","first-page":"75","volume-title":"Proc. of ISSAC\u00a02002","author":"J.\u00a0C. Faug\u00e8re","year":"2002","unstructured":"J.\u00a0C. Faug\u00e8re, A new efficient algorithm for computing Gr\u00f6bner bases without reduction to zero (F 5), Proc. of ISSAC\u00a02002, ACM, New York, 2002, pp.\u00a075\u201383."},{"key":"15_CR36","unstructured":"J. Faug\u00e8re and G. Ars, An algebraic cryptanalysis of nonlinear filter generators using Gr\u00f6bner bases, INRIA Research Report 4739, 2003."},{"key":"15_CR37","series-title":"LNCS","first-page":"44","volume-title":"Algebraic cryptanalysis of hidden field equation (HFE) cryptosystems using Gr\u00f6bner bases","author":"J.\u00a0C. Faug\u00e8re","year":"2003","unstructured":"J.\u00a0C. Faug\u00e8re and A. Joux, Algebraic cryptanalysis of hidden field equation (HFE) cryptosystems using Gr\u00f6bner bases, LNCS, vol.\u00a02729 Springer, Berlin, 2003, pp.\u00a044\u201360."},{"key":"15_CR38","series-title":"LNCS","first-page":"30","volume-title":"EUROCRYPT\u00a02006","author":"J.\u00a0C. Faug\u00e8re","year":"2006","unstructured":"J.\u00a0C. Faug\u00e8re and L. Perret, Polynomial equivalence problems: algorithmic and theoretical aspects, EUROCRYPT\u00a02006, LNCS, vol.\u00a04004, Springer, Berlin, 2006a, pp.\u00a030\u201347."},{"key":"15_CR39","series-title":"LNCS","first-page":"357","volume-title":"CRYPTO\u00a02006","author":"J.\u00a0C. Faug\u00e8re","year":"2006","unstructured":"J.\u00a0C. Faug\u00e8re and L. Perret, Cryptanalysis of 2R $^{\\mbox{-}}$ schemes, CRYPTO\u00a02006 (C. Dwork, ed.), LNCS, vol.\u00a04117, Springer, Berlin, 2006b, pp.\u00a0357\u2013372."},{"key":"15_CR40","series-title":"LNCS","first-page":"280","volume-title":"CRYPTO\u00a02008","author":"J.-C. Faug\u00e8re","year":"2008","unstructured":"J.-C. Faug\u00e8re and L. Perret, Cryptanalysis of MinRank, CRYPTO\u00a02008 (D. Wagner, ed.), LNCS, vol.\u00a05157, Springer, Berlin, 2008a, pp.\u00a0280\u2013296."},{"key":"15_CR41","unstructured":"J.-C. Faug\u00e8re and L. Perret, On the security of UOV, SCC\u00a02008 (D.\u00a0Wang and J.\u00a0C. Faug\u00e8re, eds.), 2008b."},{"key":"15_CR42","series-title":"LNCS","first-page":"340","volume-title":"CRYPTO\u00a085","author":"H.\u00a0J. Fell","year":"1985","unstructured":"H.\u00a0J. Fell and W. Diffie, Analysis of a public key approach based on polynomial substitution, CRYPTO\u00a085 (H.\u00a0C. Williams, ed.), LNCS, vol.\u00a0218, Springer, Berlin, 1985, pp.\u00a0340\u2013349."},{"key":"15_CR43","series-title":"Contemporary Mathematics","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1090\/conm\/168\/01688","volume-title":"Finite Fields: Theory, Applications, and Algorithms","author":"M. Fellows","year":"1994","unstructured":"M. Fellows and N. Koblitz, Combinatorial cryptosystems galore!, Finite Fields: Theory, Applications, and Algorithms (G.\u00a0L. Mullen and P.\u00a0J.-S. Shiue, eds.), Contemporary Mathematics, vol.\u00a0168, AMS, Providence, 1994, pp.\u00a051\u201361."},{"key":"15_CR44","series-title":"LNCS","first-page":"341","volume-title":"EUROCRYPT\u00a02005","author":"P.-A. Fouque","year":"2005","unstructured":"P.-A. Fouque, L. Granboulan, and J. Stern, Differential cryptanalysis for multivariate schemes, EUROCRYPT\u00a02005 (R. Cramer, ed.), LNCS, vol.\u00a03494, Springer, Berlin, 2005, pp.\u00a0341\u2013353."},{"key":"15_CR45","series-title":"LNCS","first-page":"1","volume-title":"PKC\u00a02008","author":"P.\u00a0A. Fouque","year":"2008","unstructured":"P.\u00a0A. Fouque, G. Macario-Rat, L. Perret, and J. Stern, Total break of the -IC signature scheme, PKC\u00a02008, LNCS, vol.\u00a04939, Springer, Berlin, 2008a, pp.\u00a01\u201317."},{"key":"15_CR46","series-title":"LNCS","first-page":"19","volume-title":"EUROCRYPT\u00a02008","author":"P.-A. Fouque","year":"2008","unstructured":"P.-A. Fouque, G. Macario-Rat, and J. Stern, Key recovery on hidden monomial multivariate schemes, EUROCRYPT\u00a02008 (N.\u00a0P. Smart, ed.), LNCS, vol.\u00a04965, Springer, Berlin, 2008b, pp.\u00a019\u201330."},{"issue":"4\u20135","key":"15_CR47","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1016\/0020-0190(80)90134-9","volume":"10","author":"A.\u00a0S. Fraenkel","year":"1980","unstructured":"A.\u00a0S. Fraenkel and Y. Yesha, Complexity of solving algebraic equations, Inf. Process. Lett. 10 (1980), nos.\u00a04\u20135, 178\u2013179.","journal-title":"Inf. Process. Lett."},{"key":"15_CR48","doi-asserted-by":"publisher","first-page":"355","DOI":"10.1007\/3-540-45325-3_31","volume-title":"Cryptography and coding\u2014IMA\u00a02001","author":"W. Geiselmann","year":"2001","unstructured":"W. Geiselmann, R. Steinwandt, and T. Beth, Attacking the affine parts of SFLASH, Cryptography and coding\u2014IMA\u00a02001, Springer, Berlin, 2001, pp.\u00a0355\u2013359."},{"key":"15_CR49","unstructured":"L. Goubin, Th\u00e9orie et Pratique de la Cryptologie sur Carte \u00e0 Microprocesseur, M\u00e9moire d\u2019habilitation \u00e0 diriger des recherches, 2003."},{"key":"15_CR50","series-title":"LNCS","first-page":"44","volume-title":"ASIACRYPT\u00a02000","author":"L. Goubin","year":"2000","unstructured":"L. Goubin and N.\u00a0T. Courtois, Cryptanalysis of the TTM cryptosystem, ASIACRYPT\u00a02000 (T.\u00a0Okamoto, ed.), LNCS, vol.\u00a01976, Springer, Berlin, 2000, pp.\u00a044\u201357."},{"key":"15_CR51","series-title":"LNCS","first-page":"345","volume-title":"CRYPTO2006","author":"L. Granboulan","year":"2006","unstructured":"L. Granboulan, A. Joux, and J. Stern, Inverting HFE is quasipolynomial, CRYPTO2006 (C. Dwork, ed.), LNCS, vol.\u00a04117, Springer, Berlin, 2006, pp.\u00a0345\u2013356."},{"key":"15_CR52","series-title":"LNCS","first-page":"108","volume-title":"Proc. of AAECC\u00a03","author":"H. Imai","year":"1985","unstructured":"H. Imai and T. Matsumoto, Algebraic methods for constructing asymmetric cryptosystems, Proc. of AAECC\u00a03, LNCS, vol.\u00a0229, Springer, Berlin, 1985, pp.\u00a0108\u2013119."},{"key":"15_CR53","series-title":"LNCS","volume-title":"Inscrypt\u00a02007","author":"X. Jiang","year":"2007","unstructured":"X. Jiang, J. Ding, and L. Hu, Kipnis-Shamir\u2019s attack on HFE revisited, Inscrypt\u00a02007 (D. Feng and Y. Zhang, eds.), LNCS, Springer, Berlin, 2007."},{"key":"15_CR54","series-title":"LNCS","first-page":"257","volume-title":"CRYPTO\u00a0\u201998","author":"A. Kipnis","year":"1998","unstructured":"A. Kipnis and A. Shamir, Cryptanalysis of the oil & vinegar signature scheme, CRYPTO\u00a0\u201998, LNCS, vol.\u00a01462, Springer, Berlin, 1998, pp.\u00a0257\u2013266."},{"key":"15_CR55","series-title":"LNCS","first-page":"19","volume-title":"CRYPTO\u00a099","author":"A. Kipnis","year":"1999","unstructured":"A. Kipnis and A. Shamir, Cryptanalysis of the HFE public key cryptosystem by relinearization, CRYPTO\u00a099 (M.\u00a0J. Wiener, ed.), LNCS, vol.\u00a01666, Springer, Berlin, 1999, pp.\u00a019\u201330."},{"key":"15_CR56","series-title":"LNCS","first-page":"206","volume-title":"EUROCRYPT\u00a0\u201999","author":"A. Kipnis","year":"1999","unstructured":"A. Kipnis, J. Patarin, and L. Goubin, Unbalanced oil & vinegar signature schemes, EUROCRYPT\u00a0\u201999 (J. Stern, ed.), LNCS, vol.\u00a01592, Springer, Berlin, 1999, pp.\u00a0206\u2013222."},{"key":"15_CR57","volume-title":"The Art of Computer Programming, Volume 2: Seminumerical Algorithms","author":"D.\u00a0E. Knuth","year":"1997","unstructured":"D.\u00a0E. Knuth, The Art of Computer Programming, Volume 2: Seminumerical Algorithms, Third ed., Addison\u2013Wesley, Reading, 1997.","edition":"3"},{"key":"15_CR58","series-title":"Algorithms and computation in mathematics","volume-title":"Algebraic aspects of cryptography","author":"N. Koblitz","year":"1999","unstructured":"N. Koblitz, Algebraic aspects of cryptography, Algorithms and computation in mathematics, vol.\u00a03, Springer, Berlin, 1999."},{"key":"15_CR59","doi-asserted-by":"crossref","unstructured":"F. Levy-dit-Vehel, M.\u00a0G. Marinari, L. Perret, and C. Traverso, A survey on Polly Cracker systems, this volume, 2009, pp.\u00a0285\u2013305.","DOI":"10.1007\/978-3-540-93806-4_16"},{"key":"15_CR60","doi-asserted-by":"crossref","DOI":"10.3792\/chmm\/1263317740","volume-title":"The algebraic theory of modular systems","author":"F.\u00a0S. Macaulay","year":"1916","unstructured":"F.\u00a0S. Macaulay, The algebraic theory of modular systems, Cambridge University Press, Cambridge, 1916."},{"key":"15_CR61","first-page":"114","volume":"42\u201344","author":"R.\u00a0J. McEliece","year":"1978","unstructured":"R.\u00a0J. McEliece, A public key cryptosystem based on algebraic coding theory, JPL DSN 42\u201344 (1978), 114\u2013116.","journal-title":"JPL DSN"},{"key":"15_CR62","doi-asserted-by":"crossref","unstructured":"T.\u00a0T. Moh, A fast public key system with signature and master key functions, Proc. of CrypTEC99, Hong Kong City Press, 1999.","DOI":"10.1080\/00927879908826559"},{"key":"15_CR63","doi-asserted-by":"crossref","unstructured":"T. Mora, Gr\u00f6bner technology, this volume, 2009, pp.\u00a011\u201325.","DOI":"10.1007\/978-3-540-93806-4_2"},{"key":"15_CR64","series-title":"LNCS","first-page":"146","volume-title":"CaLC\u00a02001","author":"P.\u00a0Q. Nguyen","year":"2001","unstructured":"P.\u00a0Q. Nguyen and J. Stern, The two faces of lattices in cryptology, CaLC\u00a02001 (J.\u00a0H. Silverman, ed.), LNCS, vol.\u00a02146, Springer, Berlin, 2001, pp.\u00a0146\u2013180."},{"issue":"2","key":"15_CR65","first-page":"159","volume":"15","author":"H. Niederreiter","year":"1986","unstructured":"H. Niederreiter, Knapsack-type cryptosystems and algebraic coding theory, Problems Control Inform. Theory\/Problemy Upravlen. Teor. Inform. 15 (1986), no.\u00a02, 159\u2013166.","journal-title":"Problems Control Inform. Theory\/Problemy Upravlen. Teor. Inform."},{"key":"15_CR66","series-title":"LNCS","first-page":"248","volume-title":"CRYPTO\u00a095","author":"J. Patarin","year":"1995","unstructured":"J. Patarin, Cryptoanalysis of the Matsumoto and Imai public key scheme of Eurocrypt\u00a0\u201988, CRYPTO\u00a095 (D. Coppersmith, ed.), LNCS, vol.\u00a0963, Springer, Berlin, 1995, pp.\u00a0248\u2013261."},{"key":"15_CR67","series-title":"LNCS","first-page":"33","volume-title":"EUROCRYPT\u00a0\u201996","author":"J. Patarin","year":"1996","unstructured":"J. Patarin, Hidden fields equations (HFE) and isomorphisms of polynomials (IP): two new families of asymmetric algorithms, EUROCRYPT\u00a0\u201996 (U.\u00a0M. Maurer, ed.), LNCS, vol.\u00a01070, Springer, Berlin, 1996, pp.\u00a033\u201348."},{"key":"15_CR68","unstructured":"J. Patarin, The oil & vinegar signature scheme, Proc. of Dagstuhl Workshop on Cryptography, 1997."},{"key":"15_CR69","unstructured":"J. Patarin, Challenge HFE, http:\/\/www.minrank.org\/hfe#challenge , 1998."},{"key":"15_CR70","series-title":"LNCS","first-page":"369","volume-title":"ICICS\u00a097","author":"J. Patarin","year":"1997","unstructured":"J. Patarin and L. Goubin, Asymmetric cryptography with S-boxes, ICICS\u00a097, LNCS, vol.\u00a01334, Springer, Berlin, 1997, pp.\u00a0369\u2013380."},{"key":"15_CR71","series-title":"LNCS","first-page":"35","volume-title":"ASIACRYPT\u00a0\u201998","author":"J. Patarin","year":"1998","unstructured":"J. Patarin, L. Goubin, and N.\u00a0T. Courtois, C *\u2212+ and HM: variations around two schemes of T.\u00a0Matsumoto and H.\u00a0Imai, ASIACRYPT\u00a0\u201998 (K. Ohta and D. Pei, eds.), LNCS, vol.\u00a01514, Springer, Berlin, 1998a, pp.\u00a035\u201349."},{"key":"15_CR72","series-title":"LNCS","first-page":"184","volume-title":"EUROCRYPT\u00a098","author":"J. Patarin","year":"1998","unstructured":"J. Patarin, L. Goubin, and N.\u00a0T. Courtois, Improved algorithms for isomorphisms of polynomials, EUROCRYPT\u00a098 (K. Nyberg, ed.), LNCS, vol.\u00a01403, Springer, Berlin, 1998b, pp.\u00a0184\u2013200."},{"key":"15_CR73","unstructured":"J. Patarin, L. Goubin, and N.\u00a0T. Courtois, SFLASH, a Fast Asymmetric Signature Scheme for Low Cost Smart-Cards, https:\/\/www.cosic.esat.kuleuven.be\/nessie\/workshop\/submissions\/sflash.zip , 2000."},{"key":"15_CR74","series-title":"LNCS","first-page":"354","volume-title":"EUROCRYPT\u00a02005","author":"L. Perret","year":"2005","unstructured":"L. Perret, A fast cryptanalysis of the isomorphism of polynomials with one secret problem, EUROCRYPT\u00a02005 (R. Cramer, ed.), LNCS, vol.\u00a03494, Springer, Berlin, 2005, pp.\u00a0354\u2013370."},{"key":"15_CR75","series-title":"LNCS","first-page":"131","volume-title":"Proc. of CRYPTO2006","author":"O. Regev","year":"2006","unstructured":"O. Regev, Lattice-based cryptography, Proc. of CRYPTO2006 (C. Dwork, ed.), LNCS, vol.\u00a04117, Springer, Berlin, 2006, pp.\u00a0131\u2013141."},{"key":"15_CR76","series-title":"LNCS","first-page":"1","volume-title":"CRYPTO93","author":"A. Shamir","year":"1993","unstructured":"A. Shamir, Efficient signature schemes based on birational permutations, CRYPTO93 (D.\u00a0R. Stinson, ed.), LNCS, vol.\u00a0773, Springer, Berlin, 1993, pp.\u00a01\u201312."},{"key":"15_CR77","doi-asserted-by":"publisher","first-page":"1484","DOI":"10.1137\/S0097539795293172","volume":"26","author":"P.\u00a0W. Shor","year":"1997","unstructured":"P.\u00a0W. Shor, Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer, SIAM J. Comput. 26 (1997), 1484\u20131509.","journal-title":"SIAM J. Comput."},{"key":"15_CR78","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/3-540-45303-2_1","volume-title":"The computational complexity of equivalence and isomorphism problems","author":"T. Thierauf","year":"2000","unstructured":"T. Thierauf, The computational complexity of equivalence and isomorphism problems, LNCS, vol.\u00a01852, Springer, Berlin, 2000, pp.\u00a01\u2013135."},{"key":"15_CR79","doi-asserted-by":"publisher","first-page":"187","DOI":"10.1007\/BF01272074","volume":"2","author":"J. Gathen von\u00a0zur","year":"1992","unstructured":"J. von\u00a0zur Gathen and V. Shoup, Computing Frobenius Maps and Factoring Polynomials, Computational Complexity 2 (1992), 187\u2013224.","journal-title":"Computational Complexity"},{"issue":"1","key":"15_CR80","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1007\/s00200-003-0122-8","volume":"14","author":"J. Gathen von\u00a0zur","year":"2003","unstructured":"J. von\u00a0zur Gathen, J. Gutierrez, and R. Rubio, Multivariate polynomial decomposition, Appl. Algebra Eng. Commun. Comput. 14 (2003), no.\u00a01, 11\u201331.","journal-title":"Appl. Algebra Eng. Commun. Comput."},{"key":"15_CR81","series-title":"LNCS","first-page":"132","volume-title":"CT-RSA\u00a02006","author":"L.-C. Wang","year":"2006","unstructured":"L.-C. Wang, B.-Y. Yang, Y.-H. Hu, and F. Lai, A \u201cMedium-Field\u201d multivariate public-key encryption scheme, CT-RSA\u00a02006 (D. Pointcheval, ed.), LNCS, vol.\u00a03860, Springer, Berlin, 2006, pp.\u00a0132\u2013149."},{"key":"15_CR82","series-title":"LNCS","first-page":"518","volume-title":"ACISP\u00a02005","author":"B.-Y. Yang","year":"2005","unstructured":"B.-Y. Yang and J.-M. Chen, Building secure tame-like multivariate public-key cryptosystems: The new TTS, ACISP\u00a02005 (C. Boyd and J.\u00a0M.\u00a0G. Nieto, eds.), LNCS, vol.\u00a03574, Springer, Berlin, 2005, pp.\u00a0518\u2013531."},{"key":"15_CR83","series-title":"LNCS","first-page":"371","volume-title":"CHES\u00a02004","author":"B.-Y. Yang","year":"2004","unstructured":"B.-Y. Yang, J.-M. Chen, and Y.-H. Chen, TTS: High-speed signatures on a low-cost smart card, CHES\u00a02004 (M. Joye and J.\u00a0J. Quisquater, eds.), LNCS, vol.\u00a03156, Springer, Berlin, 2004, pp.\u00a0371\u2013385."},{"key":"15_CR84","series-title":"LNCS","first-page":"315","volume-title":"CRYPTO\u00a099","author":"D.-F. Ye","year":"1999","unstructured":"D.-F. Ye, K.-Y. Lam, and Z.-D. Dai, Cryptanalysis of \u201c2\u00a0R\u201d schemes, CRYPTO\u00a099, LNCS, vol.\u00a01666, Springer, Berlin, 1999, pp.\u00a0315\u2013325."},{"issue":"2","key":"15_CR85","doi-asserted-by":"publisher","first-page":"137","DOI":"10.1007\/s00145-001-0001-x","volume":"14","author":"D.-F. Ye","year":"2001","unstructured":"D.-F. Ye, Z.-D. Dai, and K.-Y. Lam, Decomposing attacks on asymmetric cryptography based on mapping compositions, J. of Cryptology 14 (2001), no.\u00a02, 137\u2013150.","journal-title":"J. of Cryptology"}],"container-title":["Gr\u00f6bner Bases, Coding, and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-93806-4_15.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,5]],"date-time":"2021-10-05T19:19:52Z","timestamp":1633461592000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-93806-4_15"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009]]},"ISBN":["9783540938057","9783540938064"],"references-count":85,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-93806-4_15","relation":{"is-part-of":[{"id-type":"doi","id":"https:\/\/doi.org\/10.1007\/978-3-540-93806-4","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2009]]}}}