• Home
  • Search
  • Efficient Algorithms for Solving Overdefined Systems of Multivariate Polynomial Equations
  • Open Access IconOpen Access
  • Cite Icon808
  • https://doi.org/10.1007/3-540-45539-6_27Copy DOI Icon

Efficient Algorithms for Solving Overdefined Systems of Multivariate Polynomial Equations

  • Jan 1, 2000
  • Nicolas Courtois +3 more
Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

The security of many recently proposed cryptosystems is based on the difficulty of solving large systems of quadratic multivariate polynomial equations. This problem is NP-hard over any field. When the number of equations m is the same as the number of unknowns n the best known algorithms are exhaustive search for small fields, and a Gröbner base algorithm for large fields. Gröbner base algorithms have large exponential complexity and cannot solve in practice systems with n ≥ 15. Kipnis and Shamir [9] have recently introduced a new algorithm called “relinearization”. The exact complexity of this algorithm is not known, but for sufficiently overdefined systems it was expected to run in polynomial time.In this paper we analyze the theoretical and practical aspects of relinearization. We ran a large number of experiments for various values of n and m, and analysed which systems of equations were actually solvable. We show that many of the equations generated by relinearization are linearly dependent, and thus relinearization is less efficient that one could expect. We then develop an improved algorithm called XL which is both simpler and more powerful than relinearization. For all 0 < ε ≤ 1/2, and m ≥ εn 2, XL and relinearization are expected to run in polynomial time of approximately \( n^{\mathcal{O}(1/\sqrt \varepsilon )} \). Moreover, we provide strong evidence that relinearization and XL can solve randomly generated systems of polynomial equations in subexponential time when m exceeds n by a number that increases slowly with n.KeywordsQuadratic EquationExhaustive SearchAsymptotic ComplexityExact ComplexityMultivariate EquationThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Similar Papers
  • Research Article
  • Citations18

The Distribution of Condition Numbers of Rational Data of Bounded Bit Length

  • Jan 01, 2002
  • Foundations of Computational Mathematics
  • D Castro +3
  • Research Article
  • Citations58

Calculation of the slowness vector from the ray vector in anisotropic media

  • Jan 10, 2006
  • Proceedings of the Royal Society A: Mathematical, Physical and Engineering Sciences
  • Václav Vavryčuk
  • Research Article
  • Citations6

On the probability distribution of data at points in real complete intersection varieties

  • Jan 17, 2008
  • Journal of Complexity
  • Cruz E Borges +1
  • Book Chapter
  • Citations79

An Analysis of the XSL Algorithm

  • Jan 01, 2005
  • Carlos Cid +1
  • Research Article
  • Citations3

A multistep strategy for polynomial system solving over finite fields and a new algebraic attack on the stream cipher Trivium

  • Jun 19, 2024
  • Finite Fields and Their Applications
  • Roberto La Scala +3
  • PDF
  • Research Article

Solving the &amp;lt;i&amp;gt;k&amp;lt;/i&amp;gt;-Independent Sets Problem of Graphs by Gr&amp;#246;bner Bases

  • Jan 01, 2023
  • Open Journal of Discrete Mathematics
  • Junyu Luo +1
  • Research Article
  • Citations17

Algebraic Cryptanalysis Scheme of AES-256 Using Gröbner Basis

  • Jan 01, 2017
  • Journal of Electrical and Computer Engineering
  • Kaixin Zhao +2
  • Research Article
  • Citations4

On polynomial semantics for propositional logics

  • Apr 02, 2016
  • Journal of Applied Non-Classical Logics
  • Juan C Agudelo-Agudelo +2
  • Research Article
  • Citations14

Deformation techniques to solve generalised Pham systems

  • Feb 11, 2004
  • Theoretical Computer Science
  • Luis Miguel Pardo +1
  • Research Article
  • Citations13

Computing the torsion points of a variety defined by lacunary polynomials

  • Oct 21, 2011
  • Mathematics of Computation
  • Louis Leroux
  • PDF
  • Research Article
  • Citations58

Quantum annealing for systems of polynomial equations

  • Jul 16, 2019
  • Scientific Reports
  • Chia Cheng Chang +3
  • Research Article
  • Citations6

The null-field approach in series form—The direct and inverse problems

  • May 01, 1986
  • The Journal of the Acoustical Society of America
  • Anders Boström
  • Research Article
  • Citations9

MIMO Instantaneous Blind Identification Based on Second-Order Temporal Structure

  • Sep 01, 2008
  • IEEE Transactions on Signal Processing
  • J Van De Laar +2
  • Supplementary Content
  • Citations5

The Relation between Polynomial Calculus, Sherali-Adams, and Sum-of-Squares Proofs

  • Jan 01, 2018
  • DROPS (Schloss Dagstuhl – Leibniz Center for Informatics)
  • Christoph Berkholz
  • Research Article
  • Citations144

Lower bounds for diophantine approximations

  • May 01, 1997
  • Journal of Pure and Applied Algebra
  • M Giusti +5
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.