{"id":"https://openalex.org/W2897128759","doi":"https://doi.org/10.1109/tit.2018.2877458","title":"A Key Recovery Reaction Attack on QC-MDPC","display_name":"A Key Recovery Reaction Attack on QC-MDPC","publication_year":2018,"publication_date":"2018-10-22","ids":{"openalex":"https://openalex.org/W2897128759","doi":"https://doi.org/10.1109/tit.2018.2877458","mag":"2897128759"},"language":"en","primary_location":{"id":"doi:10.1109/tit.2018.2877458","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tit.2018.2877458","pdf_url":null,"source":{"id":"https://openalex.org/S4502562","display_name":"IEEE Transactions on Information Theory","issn_l":"0018-9448","issn":["0018-9448","1557-9654"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Theory","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011896992","display_name":"Qian Guo","orcid":"https://orcid.org/0000-0003-0930-3174"},"institutions":[{"id":"https://openalex.org/I4432739","display_name":"University of Bergen","ror":"https://ror.org/03zga2b32","country_code":"NO","type":"education","lineage":["https://openalex.org/I4432739"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Qian Guo","raw_affiliation_strings":["Selmer Center, University of Bergen, Bergen, Norway"],"raw_orcid":"https://orcid.org/0000-0003-0930-3174","affiliations":[{"raw_affiliation_string":"Selmer Center, University of Bergen, Bergen, Norway","institution_ids":["https://openalex.org/I4432739"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019956193","display_name":"Thomas Johansson","orcid":"https://orcid.org/0000-0003-1798-570X"},"institutions":[{"id":"https://openalex.org/I187531555","display_name":"Lund University","ror":"https://ror.org/012a77v79","country_code":"SE","type":"education","lineage":["https://openalex.org/I187531555"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Thomas Johansson","raw_affiliation_strings":["Department of Electrical and Information Technology, Lund University, Lund, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Information Technology, Lund University, Lund, Sweden","institution_ids":["https://openalex.org/I187531555"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022656343","display_name":"Paul Stankovski","orcid":"https://orcid.org/0000-0002-2002-4240"},"institutions":[{"id":"https://openalex.org/I187531555","display_name":"Lund University","ror":"https://ror.org/012a77v79","country_code":"SE","type":"education","lineage":["https://openalex.org/I187531555"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Paul Stankovski Wagner","raw_affiliation_strings":["Department of Electrical and Information Technology, Lund University, Lund, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-2002-4240","affiliations":[{"raw_affiliation_string":"Department of Electrical and Information Technology, Lund University, Lund, Sweden","institution_ids":["https://openalex.org/I187531555"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4776,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.86999328,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":"65","issue":"3","first_page":"1845","last_page":"1861"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10682","display_name":"Quantum Computing Algorithms and Architecture","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10682","display_name":"Quantum Computing Algorithms and Architecture","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13182","display_name":"Quantum-Dot Cellular Automata","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7291146516799927},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.7230904698371887},{"id":"https://openalex.org/keywords/decoding-methods","display_name":"Decoding methods","score":0.704447329044342},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5752422213554382},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.5051136612892151},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.49733904004096985},{"id":"https://openalex.org/keywords/key-size","display_name":"Key size","score":0.49571120738983154},{"id":"https://openalex.org/keywords/key-encapsulation","display_name":"Key encapsulation","score":0.46997207403182983},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.46251097321510315},{"id":"https://openalex.org/keywords/key-generation","display_name":"Key generation","score":0.4524955153465271},{"id":"https://openalex.org/keywords/post-quantum-cryptography","display_name":"Post-quantum cryptography","score":0.4486163854598999},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.4482031464576721},{"id":"https://openalex.org/keywords/symmetric-key-algorithm","display_name":"Symmetric-key algorithm","score":0.3458402156829834},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3347005248069763},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.19066941738128662}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7291146516799927},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.7230904698371887},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.704447329044342},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5752422213554382},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5051136612892151},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.49733904004096985},{"id":"https://openalex.org/C47750902","wikidata":"https://www.wikidata.org/wiki/Q1557574","display_name":"Key size","level":4,"score":0.49571120738983154},{"id":"https://openalex.org/C35181327","wikidata":"https://www.wikidata.org/wiki/Q6398156","display_name":"Key encapsulation","level":5,"score":0.46997207403182983},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.46251097321510315},{"id":"https://openalex.org/C163173736","wikidata":"https://www.wikidata.org/wiki/Q3308558","display_name":"Key generation","level":3,"score":0.4524955153465271},{"id":"https://openalex.org/C108277079","wikidata":"https://www.wikidata.org/wiki/Q7233576","display_name":"Post-quantum cryptography","level":4,"score":0.4486163854598999},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4482031464576721},{"id":"https://openalex.org/C65302260","wikidata":"https://www.wikidata.org/wiki/Q327675","display_name":"Symmetric-key algorithm","level":4,"score":0.3458402156829834},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3347005248069763},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.19066941738128662},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tit.2018.2877458","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tit.2018.2877458","pdf_url":null,"source":{"id":"https://openalex.org/S4502562","display_name":"IEEE Transactions on Information Theory","issn_l":"0018-9448","issn":["0018-9448","1557-9654"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Theory","raw_type":"journal-article"},{"id":"pmh:oai:lup.lub.lu.se:e629d367-7a1a-44eb-b52d-a31f9f6e6ecc","is_oa":false,"landing_page_url":"https://lup.lub.lu.se/record/e629d367-7a1a-44eb-b52d-a31f9f6e6ecc","pdf_url":null,"source":{"id":"https://openalex.org/S4306400536","display_name":"Lund University Publications (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ISSN: 0018-9448","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Partnerships for the goals","score":0.49000000953674316,"id":"https://metadata.un.org/sdg/17"}],"awards":[{"id":"https://openalex.org/G1312750746","display_name":"Future cryptographic primitives from LWE and related problems","funder_award_id":"2015-04528","funder_id":"https://openalex.org/F4320322581","funder_display_name":"Vetenskapsr\u00e5det"},{"id":"https://openalex.org/G8267608932","display_name":null,"funder_award_id":"247742/070","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"}],"funders":[{"id":"https://openalex.org/F4320322581","display_name":"Vetenskapsr\u00e5det","ror":"https://ror.org/03zttf063"},{"id":"https://openalex.org/F4320323299","display_name":"Norges Forskningsr\u00e5d","ror":"https://ror.org/00epmv149"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W72398006","https://openalex.org/W101141927","https://openalex.org/W186403072","https://openalex.org/W186890618","https://openalex.org/W1516512945","https://openalex.org/W1534643746","https://openalex.org/W1579684562","https://openalex.org/W1606480398","https://openalex.org/W1611563112","https://openalex.org/W1675339804","https://openalex.org/W1866276740","https://openalex.org/W1872498068","https://openalex.org/W1876796228","https://openalex.org/W1896743460","https://openalex.org/W1965275036","https://openalex.org/W2004878800","https://openalex.org/W2020457125","https://openalex.org/W2023355697","https://openalex.org/W2043250695","https://openalex.org/W2102589612","https://openalex.org/W2122741674","https://openalex.org/W2128765501","https://openalex.org/W2156826724","https://openalex.org/W2168676717","https://openalex.org/W2168794720","https://openalex.org/W2169220333","https://openalex.org/W2245993970","https://openalex.org/W2296233668","https://openalex.org/W2399775403","https://openalex.org/W2481989978","https://openalex.org/W2517312222","https://openalex.org/W2520683369","https://openalex.org/W2621357008","https://openalex.org/W2778213072","https://openalex.org/W2784141095","https://openalex.org/W2795083828","https://openalex.org/W2895182117","https://openalex.org/W2902198978","https://openalex.org/W2950044438","https://openalex.org/W2951204912","https://openalex.org/W2963603795","https://openalex.org/W2986959318","https://openalex.org/W3103858320","https://openalex.org/W4232078629","https://openalex.org/W4254004483","https://openalex.org/W4285719527","https://openalex.org/W4297991408","https://openalex.org/W4300188436","https://openalex.org/W6602974000","https://openalex.org/W6630837767","https://openalex.org/W6639159451","https://openalex.org/W6639397276","https://openalex.org/W6675515851","https://openalex.org/W6721795580","https://openalex.org/W6726787662","https://openalex.org/W6734414832","https://openalex.org/W6756297088","https://openalex.org/W6770380337"],"related_works":["https://openalex.org/W2384848998","https://openalex.org/W2173022519","https://openalex.org/W2241715175","https://openalex.org/W2965905066","https://openalex.org/W2519998931","https://openalex.org/W4298081086","https://openalex.org/W4206167827","https://openalex.org/W1580878112","https://openalex.org/W2182197214","https://openalex.org/W2029198293"],"abstract_inverted_index":{"Algorithms":[0],"for":[1,102,148,213,230,244,257,290],"secure":[2],"encryption":[3],"in":[4,15,86,117,157,187,271],"a":[5,11,37,47,77,99,122,143,183,248,291],"post-quantum":[6],"world":[7],"are":[8,260],"currently":[9],"receiving":[10],"lot":[12],"of":[13,20,110,146,163,172,250,283],"attention":[14],"the":[16,21,27,54,58,80,84,103,108,118,128,132,154,164,173,195,211,220,241,255,265,272,278,281],"research":[17],"community.":[18],"One":[19],"most":[22],"promising":[23],"such":[24],"algorithms":[25,229],"is":[26,107,182,209],"code-based":[28],"scheme":[29,56,175],"called":[30],"QC-MDPC,":[31],"which":[32,106],"has":[33,137],"excellent":[34],"performance":[35],"and":[36,67,83,140],"small":[38,73],"public":[39],"key":[40,50,82,130,156,231,245,293],"size.":[41],"In":[42,121],"this":[43,68,188],"paper,":[44],"we":[45,95,125,201,226],"present":[46,227],"very":[48,192],"efficient":[49],"recovery":[51],"attack":[52,136,165,181],"on":[53,142,169,280],"QC-MDPC":[55,147,174],"using":[57],"fact":[59],"that":[60,176,210,285],"decryption":[61],"uses":[62],"an":[63,234],"iterative":[64],"decoding":[65,221],"step,":[66,124],"can":[69,89,166,202],"fail":[70],"with":[71,205,269],"some":[72],"probability.":[74],"We":[75,238,262],"identify":[76],"dependence":[78],"between":[79,113],"secret":[81,104,119,129,155],"failure":[85],"decoding.":[87],"This":[88,275],"be":[90,167,288],"used":[91],"to":[92,97,267,287],"build":[93],"what":[94],"refer":[96],"as":[98],"distance":[100,133,236,273],"spectrum":[101],"key,":[105],"set":[109],"all":[111],"distances":[112],"any":[114],"two":[115],"ones":[116],"key.":[120],"reconstruction":[123,232,246],"then":[126],"determine":[127],"from":[131,233],"spectrum.":[134,237,274],"The":[135,180,198],"been":[138],"implemented":[139],"tested":[141],"proposed":[144,170],"instance":[145],"80-bit":[149,258],"security.":[150,179],"It":[151],"successfully":[152],"recovers":[153],"minutes.":[158],"A":[159],"slightly":[160],"modified":[161],"version":[162],"applied":[168],"versions":[171],"provides":[177],"IND-CCA":[178],"bit":[184],"more":[185],"complex":[186],"case,":[189],"but":[190],"still":[191],"much":[193],"below":[194],"security":[196,208,259],"level.":[197],"reason":[199],"why":[200],"break":[203],"schemes":[204],"proved":[206],"CCA":[207],"model":[212],"these":[214],"proofs":[215],"typically":[216],"does":[217],"not":[218],"include":[219],"error":[222],"possibility.":[223],"At":[224],"last,":[225],"several":[228],"empirical":[235],"first":[239],"improve":[240],"na\u00efve":[242],"algorithm":[243,266],"by":[247],"factor":[249],"about":[251],"3":[252],"0000,":[253],"when":[254],"parameters":[256],"implemented.":[261],"further":[263],"develop":[264],"deal":[268],"errors":[270],"ultimately":[276],"reduces":[277],"requirement":[279],"number":[282],"ciphertexts":[284],"need":[286],"collected":[289],"successful":[292],"recovery.":[294]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":4}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}