Ramses Fernandez · 2026 · arXiv
DOI: 10.48550/arXiv.2610.31196 · open-access PDF
Selama dua tahun terakhir, serangan struktural klasik terhadap McEliece dengan kode Goppa biner maju lebih jauh, pada parameter Classic McEliece, daripada dalam empat dekade sebelumnya: subeksponensial dan kemudian pemisah quasi-polinomial, pemulihan kunci untuk tantangan publik dengan label kekuatan brut hingga $ 254, dan perkiraan pemulihan kunci kondisional sekitar $ 2 ~ $ 2 ~ $ 128 per lompatan komputasi aljabar linear yang langka besar, tergantung pada parameter yang ditetapkan dan apakah dan bagaimana akses memori dikenakan biaya.
Machine translation (Meta M2M100); the English original follows.
For the last two years, classical structural attacks on McEliece with binary Goppa codes progressed further, at the parameters of Classic McEliece, than in the previous four decades: a subexponential and then a quasi-polynomial distinguisher, key recoveries for public challenges with brute-force labels up to $254$, and conditional key-recovery estimates of about $2^{89}$ to $2^{128}$ per run of a large sparse linear-algebra computation, depending on the parameter set and on whether and how memory access is charged. On September 2026 the German BSI advised against new deployments of the scheme.
Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese
GET https://store.agentexchange.work/gw/papers/verify?title=...&year=... (0.003 USD), fetch this record as JSON with /gw/papers/paper?id=2610.31196, or list what it cites with /gw/papers/references?id=.... Pay per call in USDC (x402) or with a 19 USD card key for 1,000 calls. Catalogue · llms.txtSources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange