I've been reading "Misuse Attacks on Post-Quantum Cryptosystems" (https://eprint.iacr.org/2019/525). In what scenarios are the attacks described in the paper applicable? Is it specifically if a key is reused to generate more than one encapsulated key? Or is it more general? Does it apply to all 'unfailing' reconciliation mechanisms?

  • $\begingroup$ According to the abstract, at least one of the claimed attack indeed is quantum: "In the latter case, we assume quantum access to the decryption oracle." $\endgroup$
    – fgrieu
    Jul 25, 2023 at 17:30
  • 1
    $\begingroup$ The paper covers a classical KR-PCA attacks and two quantum KR-CCA attacks (GKZ and AJOP based). I'm curious about all of them, so I'll edit the title. $\endgroup$ Jul 25, 2023 at 21:28


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.