{"id":"https://openalex.org/W4392358651","doi":"https://doi.org/10.46586/tosc.v2024.i1.214-233","title":"Algebraic Attack on FHE-Friendly Cipher HERA Using Multiple Collisions","display_name":"Algebraic Attack on FHE-Friendly Cipher HERA Using Multiple Collisions","publication_year":2024,"publication_date":"2024-03-01","ids":{"openalex":"https://openalex.org/W4392358651","doi":"https://doi.org/10.46586/tosc.v2024.i1.214-233"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2024.i1.214-233","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2024.i1.214-233","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11407/10905","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11407/10905","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003177942","display_name":"Fukang Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I114531698","display_name":"Tokyo Institute of Technology","ror":"https://ror.org/0112mx960","country_code":"JP","type":"education","lineage":["https://openalex.org/I114531698"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Fukang Liu","raw_affiliation_strings":["Tokyo Institute of Technology, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tokyo Institute of Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I114531698"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104196013","display_name":"Abul Kalam","orcid":null},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"education","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Abul Kalam","raw_affiliation_strings":["Indian Institute of Technology Madras, Chennai, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Madras, Chennai, India","institution_ids":["https://openalex.org/I24676775"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058432784","display_name":"Santanu Sarkar","orcid":"https://orcid.org/0000-0001-6821-920X"},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"education","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Santanu Sarkar","raw_affiliation_strings":["Indian Institute of Technology Madras, Chennai, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Madras, Chennai, India","institution_ids":["https://openalex.org/I24676775"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086309954","display_name":"Willi Meier","orcid":"https://orcid.org/0000-0003-4594-1501"},"institutions":[{"id":"https://openalex.org/I2972652528","display_name":"FHNW University of Applied Sciences and Arts Northwestern Switzerland","ror":"https://ror.org/04mq2g308","country_code":"CH","type":"education","lineage":["https://openalex.org/I2972652528"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Willi Meier","raw_affiliation_strings":["University of Applied Sciences and Arts Northwestern Switzerland (FHNW), Windisch, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Applied Sciences and Arts Northwestern Switzerland (FHNW), Windisch, Switzerland","institution_ids":["https://openalex.org/I2972652528"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9277,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.71688191,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"2024","issue":"1","first_page":"214","last_page":"233"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9648000001907349,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cipher","display_name":"Cipher","score":0.6892880201339722},{"id":"https://openalex.org/keywords/hera","display_name":"HERA","score":0.6693682074546814},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5858913064002991},{"id":"https://openalex.org/keywords/algebraic-number","display_name":"Algebraic number","score":0.5152462124824524},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.44850507378578186},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.33404165506362915},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29421597719192505},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.24867278337478638},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.2441709041595459},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.1326325237751007},{"id":"https://openalex.org/keywords/particle-physics","display_name":"Particle physics","score":0.1202421486377716}],"concepts":[{"id":"https://openalex.org/C2780221543","wikidata":"https://www.wikidata.org/wiki/Q4681865","display_name":"Cipher","level":3,"score":0.6892880201339722},{"id":"https://openalex.org/C2779762263","wikidata":"https://www.wikidata.org/wiki/Q1054761","display_name":"HERA","level":3,"score":0.6693682074546814},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5858913064002991},{"id":"https://openalex.org/C9376300","wikidata":"https://www.wikidata.org/wiki/Q168817","display_name":"Algebraic number","level":2,"score":0.5152462124824524},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.44850507378578186},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.33404165506362915},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29421597719192505},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.24867278337478638},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.2441709041595459},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.1326325237751007},{"id":"https://openalex.org/C109214941","wikidata":"https://www.wikidata.org/wiki/Q18334","display_name":"Particle physics","level":1,"score":0.1202421486377716},{"id":"https://openalex.org/C117137515","wikidata":"https://www.wikidata.org/wiki/Q238170","display_name":"Quantum chromodynamics","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tosc.v2024.i1.214-233","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2024.i1.214-233","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11407/10905","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b0d55b52d5a2447fa98f11f94969e4f0","is_oa":true,"landing_page_url":"https://doaj.org/article/b0d55b52d5a2447fa98f11f94969e4f0","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2024, Iss 1 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2024.i1.214-233","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2024.i1.214-233","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11407/10905","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.46000000834465027}],"awards":[{"id":"https://openalex.org/G2430522312","display_name":"Design and Cryptanalysis of MPC/FHE-friendly Symmetric-key Primitives","funder_award_id":"22K21282","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392358651.pdf","grobid_xml":"https://content.openalex.org/works/W4392358651.grobid-xml"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W1629301835","https://openalex.org/W1964723977","https://openalex.org/W2008272678","https://openalex.org/W2035476608","https://openalex.org/W2160494425","https://openalex.org/W2164327070","https://openalex.org/W2289561827","https://openalex.org/W2469100438","https://openalex.org/W2504631490","https://openalex.org/W2552640487","https://openalex.org/W2614074621","https://openalex.org/W2768174108","https://openalex.org/W2770809732","https://openalex.org/W2794866029","https://openalex.org/W2798373574","https://openalex.org/W2912272895","https://openalex.org/W2947157832","https://openalex.org/W2953015727","https://openalex.org/W2970041775","https://openalex.org/W3013357475","https://openalex.org/W3090660998","https://openalex.org/W3091014139","https://openalex.org/W3091883733","https://openalex.org/W3096308802","https://openalex.org/W3096445002","https://openalex.org/W3111977394","https://openalex.org/W3133710726","https://openalex.org/W3169109595","https://openalex.org/W3173254480","https://openalex.org/W3174727680","https://openalex.org/W3196520766","https://openalex.org/W3201741394","https://openalex.org/W3203698088","https://openalex.org/W3205150321","https://openalex.org/W4210727572","https://openalex.org/W4241072010","https://openalex.org/W4253496694","https://openalex.org/W4256634395","https://openalex.org/W4295067058","https://openalex.org/W4308391475","https://openalex.org/W4317928326","https://openalex.org/W4365807722","https://openalex.org/W4365808218","https://openalex.org/W4385654158","https://openalex.org/W4385654519","https://openalex.org/W4389857021"],"related_works":["https://openalex.org/W954422107","https://openalex.org/W2950393077","https://openalex.org/W131942052","https://openalex.org/W2022523733","https://openalex.org/W2795108369","https://openalex.org/W4302293368","https://openalex.org/W4256139993","https://openalex.org/W2266654774","https://openalex.org/W1646778744","https://openalex.org/W3032430507"],"abstract_inverted_index":{"Fully":[0],"homomorphic":[1],"encryption":[2],"(FHE)":[3],"is":[4,42,103,117,127,131,267,324],"an":[5,212,275],"advanced":[6],"cryptography":[7],"technique":[8,45],"to":[9,37,48,66,100,155,169,173,184,308,331,335],"allow":[10],"computations":[11],"(i.e.,":[12],"addition":[13],"and":[14,31,55,80,198,225,241,319,355],"multiplication)":[15],"over":[16,132],"encrypted":[17],"data.":[18],"After":[19],"years":[20],"of":[21,25,52,150,202,215,217,244,303,306,315,322,347],"effort,":[22],"the":[23,50,57,63,67,76,107,111,120,146,164,170,175,187,195,203,223,228,231,253,260,300,313,332,351],"performance":[24],"FHE":[26,47,69],"has":[27,33,95],"been":[28],"significantly":[29],"improved":[30],"it":[32,102,130,182],"moved":[34],"from":[35],"theory":[36],"practice.":[38],"The":[39],"transciphering":[40,64,73],"framework":[41,65,74,79],"another":[43],"important":[44],"in":[46,106,163,178,194,222],"address":[49],"issue":[51],"ciphertext":[53],"expansion":[54],"reduce":[56,299],"client-side":[58],"computational":[59],"overhead.":[60],"To":[61],"apply":[62],"CKKS":[68],"scheme,":[70],"a":[71,81,96,123,133,199,218,235,345],"new":[72,157],"called":[75,86],"Real-to-Finite-Field":[77],"(RtF)":[78],"corresponding":[82],"FHE-friendly":[83],"symmetric-key":[84],"primitive":[85],"HERA":[87,94,238,307,316,348],"were":[88],"proposed":[89],"at":[90],"ASIACRYPT":[91],"2021.":[92],"Although":[93],"very":[97],"similar":[98],"structure":[99],"AES,":[101],"considerably":[104],"different":[105],"following":[108],"aspects:":[109],"1)":[110],"power":[112,204],"map":[113],"x":[114],"\u2192":[115],"x3":[116],"used":[118],"as":[119],"S-box;":[121],"2)":[122],"randomized":[124,352],"key":[125,197,353],"schedule":[126,354],"used;":[128],"3)":[129],"prime":[134],"field":[135,282],"Fp":[136],"with":[137,160,239,317],"p":[138],">":[139],"216.":[140],"In":[141,206,339],"this":[142,207],"work,":[143],"we":[144,180,209,247],"perform":[145],"first":[147],"third-party":[148],"cryptanalysis":[149],"HERA,":[151,179],"by":[152,191,257,327,350],"showing":[153],"how":[154],"mount":[156],"algebraic":[158],"attacks":[159,295,329,343],"multiple":[161,337],"collisions":[162,193],"round":[165,176],"keys.":[166],"Specifically,":[167],"according":[168],"special":[171],"way":[172],"randomize":[174],"keys":[177],"find":[181,336],"possible":[183],"peel":[185],"off":[186],"last":[188],"nonlinear":[189],"layer":[190],"using":[192,285],"last-round":[196],"simple":[200],"property":[201],"map.":[205],"way,":[208],"could":[210,248],"construct":[211],"overdefined":[213],"system":[214,229],"equations":[216],"much":[219],"lower":[220],"degree":[221],"key,":[224],"efficiently":[226],"solve":[227],"via":[230],"linearization":[232],"technique.":[233],"As":[234],"esult,":[236],"for":[237,264],"192":[240],"256":[242],"bits":[243,321],"security,":[245],"respectively,":[246],"break":[249],"some":[250,304],"parameters":[251],"under":[252],"same":[254],"assumption":[255],"made":[256],"designers":[258],"that":[259],"algebra":[261],"constant":[262],"\u03c9":[263,268,290],"Gaussian":[265,272],"elimination":[266,273],"=":[269],"2,":[270],"i.e.,":[271],"on":[274],"n":[276,278],"\u00d7":[277],"matrix":[279],"takes":[280],"O(n\u03c9)":[281],"operations.":[283],"If":[284],"more":[286],"conservative":[287],"choices":[288],"like":[289],"\u2208":[291],"{2.8,":[292],"3},":[293],"our":[294,328,342],"can":[296],"also":[297],"successfully":[298],"security":[301,314,323],"margins":[302],"variants":[305],"only":[309],"1":[310],"round.":[311],"However,":[312],"80":[318],"128":[320],"not":[325],"affected":[326],"due":[330],"high":[333],"cost":[334],"collisions.":[338],"any":[340],"case,":[341],"reveal":[344],"weakness":[346],"caused":[349],"its":[356],"small":[357],"state":[358],"size.":[359]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}