Searcharxiv⌕ Search

arXiv subjects

Håvard Raddum

Publications and source records attributed to Håvard Raddum.

3 recordsLinked to original sources

Attacking the Polynomials in the Maze of Finite Fields problem

In April 2025 GMV announced a competition for finding the best method to solve a particular polynomial system over a finite field. In this paper we provide a method for solving the given equation system significantly faster than what is possible by brute-force or standard Gröbner basis approaches. The method exploits the structured sparsity of the polynomial system to compute a univariate polynomial in the associated ideal through successive computations of resultants. A solution to the system can then be efficiently recovered from this univariate polynomial. Pseudocode is given for the proposed ResultantSolver algorithm, along with experiments and comparisons to rival methods. We also discuss further potential improvements, such as parallelizing parts of the computations.

cs.CC↗

Obtuse Lattice Bases

A lattice reduction is an algorithm that transforms the given basis of the lattice to another lattice basis such that problems like finding a shortest vector and closest vector become easier to solve. We define a class of bases called obtuse bases and show that any lattice basis can be transformed to an obtuse basis. A shortest vector $\mathbf{s}$ can be written as $\mathbf{s}=v_1\mathbf{b}_1+\dots+v_n\mathbf{b}_n$ where $\mathbf{b}_1,\dots,\mathbf{b}_n$ are the input basis vectors and $v_1,\dots,v_n$ are integers. When the input basis is obtuse, all these integers can be chosen to be positive for a shortest vector. This property of obtuse bases makes the lattice enumeration algorithm for finding a shortest vector exponentially faster. We have implemented the algorithm for making bases obtuse, and tested it some small bases.

cs.DS↗

Eliminating Variables in Boolean Equation Systems

Systems of Boolean equations of low degree arise in a natural way when analyzing block ciphers. The cipher's round functions relate the secret key to auxiliary variables that are introduced by each successive round. In algebraic cryptanalysis, the attacker attempts to solve the resulting equation system in order to extract the secret key. In this paper we study algorithms for eliminating the auxiliary variables from these systems of Boolean equations. It is known that elimination of variables in general increases the degree of the equations involved. In order to contain computational complexity and storage complexity, we present two new algorithms for performing elimination while bounding the degree at $3$, which is the lowest possible for elimination. Further we show that the new algorithms are related to the well known \emph{XL} algorithm. We apply the algorithms to a downscaled version of the LowMC cipher and to a toy cipher based on the Prince cipher, and report on experimental results pertaining to these examples.

cs.CR↗