Ressource pédagogique : 4.9. Goppa codes still resist

All the results that we have seen this week doesn't mean that code based cryptography is broken. So in this session we will see that Goppa code still resists to all these attacks. So recall that it is assumed that Goppa codes are pseudorandom, that is there exist no efficient distinguisher for Gopp...
cours / présentation - Date de création : 05-05-2015
Partagez !

Présentation de: 4.9. Goppa codes still resist

Informations pratiques sur cette ressource

Anglais
Type pédagogique : cours / présentation
Niveau : master, doctorat
Durée d'exécution : 4 minutes 4 secondes
Contenu : image en mouvement
Document : video/mp4
Taille : 124.17 Mo
Droits : libre de droits, gratuit
Droits réservés à l'éditeur et aux auteurs. Ces ressources de cours sont, sauf mention contraire, diffusées sous Licence Creative Commons. L’utilisateur doit mentionner le nom de l’auteur, il peut exploiter l’?uvre sauf dans un contexte commercial et il ne peut apporter de modifications à l’?uvre originale.

Description de la ressource pédagogique

Description (résumé)

All the results that we have seen this week doesn't mean that code based cryptography is broken. So in this session we will see that Goppa code still resists to all these attacks. So recall that it is assumed that Goppa codes are pseudorandom, that is there exist no efficient distinguisher for Goppa code. An efficient distinguisher was built for the case of high rate codes, where the rate is very close to 1, but no generalization of this distinguisher is known. The best known attacks are based on the Support Splitting Algorithm and have exponential runtime. In the third session of this week, we have seen that Generalized Reed-Solomon codes behave differently than random codes, with respect to the square product that is the dimension of the square of a Generalized Reed-Solomon code is very small compared to what it's expected for a random code of the same length and dimension. Since an alternant code is a subfield subcode of a Generalized Reed-Solomon code, we might suspect that the star product of alternant codes also behave differently from random codes. As we will see, this is true but just for a very few cases. The following proposition shows that the star product of two alternant codes is another alternant code and the proof is very easy. We just need to recall that alternant codes are subfield subcodes of Generalized Reed Solomon code. So how works this proof? Let c1 be a codeword of an alternant code and c2 be another codeword of a different alternant code with the same support. Then, there exist two polynomials of degree smaller than n-s and another polynomial of degree smaller than n-r such that the evaluation of these polynomials at the corresponding elements give our codewords.

"Domaine(s)" et indice(s) Dewey

  • Analyse numérique (518)
  • Théorie de l'information (003.54)
  • données dans les systèmes informatiques (005.7)
  • cryptographie (652.8)
  • Mathématiques (510)

Thème(s)

Partagez !

AUTEUR(S)

  • Irene MARQUEZ-CORBELLA
  • Nicolas SENDRIER
  • Matthieu FINIASZ

EN SAVOIR PLUS

  • Identifiant de la fiche
    32955
  • Identifiant
    oai:canal-u.fr:32955
  • Schéma de la métadonnée
  • Entrepôt d'origine
    Canal-u.fr