Quo Vadis Quaternion? Cryptanalysis of Rainbow over Non-commutative Rings

Abstract

Abstract. The Rainbow Signature Scheme is a non-trivial generalization of the well known Unbalanced Oil and Vinegar Signature Scheme (Eurocrypt '99) minimizing the length of the signatures. Recently a new variant based on non-commutative rings, called NC-Rainbow, was introduced at CT-RSA 2012 to further minimize the secret key size. We disprove the claim that NC-Rainbow is as secure as Rainbow in general and show how to reduce the complexity of MinRank attacks from 2 288 to 2 192 and of HighRank attacks from 2 128 to 2 96 for the proposed instantiation over the ring of Quaternions. We further reveal some facts about Quaternions that increase the complexity of the signing algorithm. We show that NC-Rainbow is just a special case of introducing further structure to the secret key in order to decrease the key size. As the results are comparable with the ones achieved by equivalent keys, which provably do not decrease security, and far worse than just using a PRNG, we recommend not to use NC-Rainbow. MQ-schemes in general su er from comparably large key sizes. The Rainbow scheme over non-commutative rings proposed at CT-RSA 2012, also called NCRainbow [17], claims to reduce the secret key size by 75% while obtaining the same level of security.