Claims first attacks on Legendre PRF over extension fields F_{p^r}, recovering keys via differential signature bucketing in O(U p^r/M) time passively and geometric sequences in O(p^r/M) time actively, proving need for degree d >= 2.
IACR Cryptology ePrint Archive, Report 2019/147 (2019).https://eprint.iacr.org/2019/147
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2026 1verdicts
UNVERDICTED 1representative citing papers
citing papers explorer
-
Cryptanalysis of the Legendre Pseudorandom Function over Extension Fields
Claims first attacks on Legendre PRF over extension fields F_{p^r}, recovering keys via differential signature bucketing in O(U p^r/M) time passively and geometric sequences in O(p^r/M) time actively, proving need for degree d >= 2.