eprint.iacr.orgpaperRevisiting the Security of VDOO
Revisiting the Security of VDOO is an ePrint paper (October 2026) on VDOO, a multivariate signature scheme submitted to China's NGCC program. It models VDOO as a multilayer Rainbow construction, keeps only the last oil space to get a generalized UOV instance, and applies wedge attacks. For the 512-bit parameter set it estimates 2^432 gates (reconciliation) and 2^379 gates (intersection), below the claimed level and the specification's figures.
TL;DR Applies wedge attacks to VDOO's generalized UOV structure and estimates its 512-bit parameter set falls to about 2^379 gates.
Organisations named here
- intersection attack
- NGCC
- reconciliation attack
- wedge attack
Technologies named here
- UOV
- Rainbow
- VDOO
Techniques named here
- Reconciliation variant of the wedge attack
- Intersection variant of the wedge attack
Related in other
eprint.iacr.orgpaperRerandomizable Garbling for Arithmetic Circuits
aseemshrey.inarticle