{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T09:37:53Z","timestamp":1785404273318,"version":"3.56.0"},"reference-count":2,"publisher":"International Association for Cryptologic Research","issue":"1","license":[{"start":{"date-parts":[[2025,1,13]],"date-time":"2025-01-13T00:00:00Z","timestamp":1736726400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IACR CiC"],"accepted":{"date-parts":[[2025,3,11]]},"abstract":"<jats:p>We provide several attacks on the BASS signature scheme introduced by Grigoriev, Ilmer, Ovchinnikov and Shpilrain in 2023. We lay out a trivial forgery attack which generates signatures passing the scheme's probabilistic signature verification with high probability. Generating these forgeries is faster than generating signatures honestly. Moreover, we describe a key-only attack which allows us to recover an equivalent private key from a signer's public key. The time complexity of this recovery is asymptotically the same as that of signing messages.<\/jats:p>","DOI":"10.62056\/avl86chdj","type":"journal-article","created":{"date-parts":[[2025,4,8]],"date-time":"2025-04-08T17:23:17Z","timestamp":1744132997000},"update-policy":"https:\/\/doi.org\/10.62056\/adfjwm02dj","source":"Crossref","is-referenced-by-count":0,"title":["Breaking BASS"],"prefix":"10.62056","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2475-2966","authenticated-orcid":false,"given":"Simon-Philipp","family":"Merz","sequence":"first","affiliation":[{"id":[{"id":"https:\/\/ror.org\/05a28rw58","id-type":"ROR","asserted-by":"publisher"}],"name":"ETH Zurich","place":["Universit\u00e4tstrasse 6, Zurich, 8092, Switzerland"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5145-4489","authenticated-orcid":false,"given":"Kenneth","family":"Paterson","sequence":"additional","affiliation":[{"id":[{"id":"https:\/\/ror.org\/05a28rw58","id-type":"ROR","asserted-by":"publisher"}],"name":"ETH Zurich","place":["Universit\u00e4tstrasse 6, Zurich, 8092, Switzerland"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"\u00c0lex","family":"Garc\u00eda","sequence":"additional","affiliation":[{"id":[{"id":"https:\/\/ror.org\/03mb6wj31","id-type":"ROR","asserted-by":"publisher"}],"name":"Universitat Polit\u00e8cnica de Catalunya","place":["Barcelona, Spain"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"48349","published-online":{"date-parts":[[2025,4,8]]},"reference":[{"key":"ref1:original_paper","isbn-type":"print","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-031-52947-4_1","article-title":"BASS: Boolean Automorphisms Signature Scheme","author":"Dima Grigoriev","year":"2024","ISBN":"https:\/\/id.crossref.org\/isbn\/9783031529474"},{"key":"ref2:code","volume-title":"Python implementation of attacks on BASS","author":"A. Rodr\u00edguez","year":"2024"}],"container-title":["IACR Communications in Cryptology"],"original-title":[],"language":"en","deposited":{"date-parts":[[2025,4,8]],"date-time":"2025-04-08T17:25:22Z","timestamp":1744133122000},"score":1,"resource":{"primary":{"URL":"https:\/\/cic.iacr.org\/p\/2\/1\/35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,8]]},"references-count":2,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,4,8]]}},"URL":"https:\/\/doi.org\/10.62056\/avl86chdj","archive":["Internet Archive","Internet Archive"],"relation":{},"ISSN":["3006-5496"],"issn-type":[{"value":"3006-5496","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4,8]]},"assertion":[{"value":"2025-01-13","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-03-11","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"cc2-1-58"}}