An efficient algorithm for decomposing multivariate polynomials and its applications to cryptography

13Citations
Citations of this article
9Readers
Mendeley users who have this article in their library.

Abstract

In this paper, we present an efficient and general algorithm for decomposing multivariate polynomials of the same arbitrary degree. This problem, also known as the Functional Decomposition Problem (FDP), is classical in computer algebra. It is the first general method addressing the decomposition of multivariate polynomials (any degree, any number of polynomials). As a byproduct, our approach can be also used to recover an ideal I from its kth power Ik. The complexity of the algorithm depends on the ratio between the number of variables (n) and the number of polynomials (u). For example, polynomials of degree four can be decomposed in O (n12), when this ratio is smaller than frac(1, 2). This work was initially motivated by a cryptographic application, namely the cryptanalysis of 2 R- schemes. From a cryptographic point of view, the new algorithm is so efficient that the principle of two-round schemes, including 2 R- schemes, becomes useless. Besides, we believe that our algorithm is of independent interest. © 2008 Elsevier Ltd. All rights reserved.

Cite

CITATION STYLE

APA

Faugère, J. C., & Perret, L. (2009). An efficient algorithm for decomposing multivariate polynomials and its applications to cryptography. Journal of Symbolic Computation, 44(12), 1676–1689. https://doi.org/10.1016/j.jsc.2008.02.005

Register to see more suggestions

Mendeley helps you to discover research relevant for your work.

Already have an account?

Save time finding and organizing research with Mendeley

Sign up for free