Research article

On the security of the STR key exchange protocol

  • Received: 11 October 2024 Revised: 05 December 2024 Accepted: 16 December 2024 Published: 07 February 2025
  • MSC : 15A16, 15A18, 15A20, 94A60

  • In this paper, we consider the security of the Sakalauskas-Tvarijonas-Raulynaitis (STR) key exchange protocol. We perform an analysis by exploring various cases of the canonical form of the publicly known matrix using elements of linear algebra and number theory. Additionally, we consider the multiplicative order of matrices and show how these two factors affect the security of the considered protocol. We show that regardless of the choice of publicly known matrix, the considered protocol is secure under the discrete logarithm assumption. In other words, if at least one of the secret exponents is found, then the STR protocol can be broken in polynomial time.

    Citation: Aleksejus Mihalkovich. On the security of the STR key exchange protocol[J]. AIMS Mathematics, 2025, 10(2): 1967-1980. doi: 10.3934/math.2025092

    Related Papers:

    [1] Dalal Awadh Alrowaili, Uzma Ahmad, Saira Hameeed, Muhammad Javaid . Graphs with mixed metric dimension three and related algorithms. AIMS Mathematics, 2023, 8(7): 16708-16723. doi: 10.3934/math.2023854
    [2] Ali N. A. Koam . Metric based resolvability of cycle related graphs. AIMS Mathematics, 2024, 9(4): 9911-9925. doi: 10.3934/math.2024485
    [3] Chenggang Huo, Humera Bashir, Zohaib Zahid, Yu Ming Chu . On the 2-metric resolvability of graphs. AIMS Mathematics, 2020, 5(6): 6609-6619. doi: 10.3934/math.2020425
    [4] Ali N. A. Koam, Sikander Ali, Ali Ahmad, Muhammad Azeem, Muhammad Kamran Jamil . Resolving set and exchange property in nanotube. AIMS Mathematics, 2023, 8(9): 20305-20323. doi: 10.3934/math.20231035
    [5] Maryam Salem Alatawi, Ali Ahmad, Ali N. A. Koam, Sadia Husain, Muhammad Azeem . Computing vertex resolvability of benzenoid tripod structure. AIMS Mathematics, 2022, 7(4): 6971-6983. doi: 10.3934/math.2022387
    [6] Ahmed Alamer, Hassan Zafar, Muhammad Javaid . Study of modified prism networks via fractional metric dimension. AIMS Mathematics, 2023, 8(5): 10864-10886. doi: 10.3934/math.2023551
    [7] Xiaogang Liu, Muhammad Ahsan, Zohaib Zahid, Shuili Ren . Fault-tolerant edge metric dimension of certain families of graphs. AIMS Mathematics, 2021, 6(2): 1140-1152. doi: 10.3934/math.2021069
    [8] Yuni Listiana, Liliek Susilowati, Slamin Slamin, Fadekemi Janet Osaye . A central local metric dimension on acyclic and grid graph. AIMS Mathematics, 2023, 8(9): 21298-21311. doi: 10.3934/math.20231085
    [9] Haitham Qawaqneh, Hasanen A. Hammad, Hassen Aydi . Exploring new geometric contraction mappings and their applications in fractional metric spaces. AIMS Mathematics, 2024, 9(1): 521-541. doi: 10.3934/math.2024028
    [10] Supaporn Saduakdee, Varanoot Khemmani . The even vertex magic total labelings of t-fold wheels. AIMS Mathematics, 2023, 8(11): 27513-27527. doi: 10.3934/math.20231407
  • In this paper, we consider the security of the Sakalauskas-Tvarijonas-Raulynaitis (STR) key exchange protocol. We perform an analysis by exploring various cases of the canonical form of the publicly known matrix using elements of linear algebra and number theory. Additionally, we consider the multiplicative order of matrices and show how these two factors affect the security of the considered protocol. We show that regardless of the choice of publicly known matrix, the considered protocol is secure under the discrete logarithm assumption. In other words, if at least one of the secret exponents is found, then the STR protocol can be broken in polynomial time.



    Metric dimension is an important parameter in metric graph theory that has appeared in numerous applications of graph theory, as diverse as, facility location problems, pharmaceutical chemistry [5,6], long range aids to navigation, navigation of robots in networks [17], combinatorial optimization [21] and sonar and coast guard Loran [23], to name a few. Metric dimension is a generalization of affine dimension to arbitrary metric spaces (provided a resolving set exists).

    In a connected graph G, the distance d(u,v) between two vertices u,vV(G) is the length of a shortest path between them. Let W={w1,w2,, wk} be an ordered set of vertices of G and let v be a vertex of G. The representation r(v|W) of v with respect to W is the k-tuple (d(v,w1),d(v,w2), d(v,w3),,d(v,wk)). W is called a resolving set [6] or locating set [23] if every vertex of G is uniquely identified by its distances from the vertices of W, or equivalently, if distinct vertices of G have distinct representations with respect to W. A resolving set of minimum cardinality is called a basis for G and this cardinality is the metric dimension of G, denoted by β(G) [3].

    For a given ordered set of vertices W={w1,w2,,wk} of a graph G, the ith component of r(v|W) is 0 if and only if v=wi. Thus, to show that W is a resolving set it is sufficient to verify that r(x|W)r(y|W) for each pair of distinct vertices x,yV(G)W.

    A useful property in computing the metric dimension denoted by β(G) is the following lemma:

    Lemma 1.1. [25] Let W be a resolving set for a connected graph G and u,vV(G). If d(u,w)=d(v,w) for all vertices wV(G){u,v}, then {u,v}W.

    Motivated by the problem of uniquely determining the location of an intruder in a network, the concept of metric dimension was first introduced by Slater in [23,24] and studied independently by Harary and Melter in [9]. Applications of this invariant to the navigation of robots in networks are discussed in [17] and applications to chemistry in [6] while applications to problem of pattern recognition and image processing, some of which involve the use of hierarchical data structures are given in [18].

    Let F be a family of connected graphs Gn:F=(Gn)n1 depending on n as follows: the order |V(G)|=φ(n) and limnφ(n)=. If there exists a constant C>0 such that β(Gn)C for every n1 then we shall say that F has bounded metric dimension; otherwise F has an unbounded metric dimension.

    If all graphs in F have the same metric dimension (which does not depend on n), F is called a family with constant metric dimension [15]. A connected graph G has β(G)=1 if and only if G is a path [6]; cycles Cn have metric dimension 2 for every n3. Also generalized Petersen graphs P(n,2), antiprisms An and circulant graphs Cn(1,2) are families of graphs with constant metric dimension [15]. Recently some classes of regular graphs with constant metric dimension have been studied in [13,20]. An example of a family which has bounded metric dimension is the family of prisms. Also generalized Petersen graphs P(n,3) have bounded metric dimension [10].

    Note that the problem of determining whether β(G)<k is an NP-complete problem [8]. Some bounds for this invariant, in terms of the diameter of the graph, are given in [17] and it was shown in [6,17,18,19] that the metric dimension of trees can be determined efficiently. It appears unlikely that significant progress can be made in determining the dimension of a graph unless it belongs to a class for which the distances between vertices can be described in some systematic manner.

    The metric dimension of families of graph having unbounded metric dimension is an interesting problem in the theory of resolving set. In [3], it was shown that the wheel graph Wn have unbounded metric dimension with β(Wn)=2n+25 for every n7. Later, Javaid et al. [26] show that the graph J2n deduced from the wheel W2n by alternately deleting n spokes has unbounded metric dimension with β(J2n)=2n3 for every n4.

    Recently, the metric dimension of some wheel related graphs and the convex polytopes generated by wheel related graph are studied by Imran et al. [14] and Siddiqui et al. [22], respectively, where they have provided an exact formula for the metric dimension of several class of wheel related graphs and shown that all those families have unbounded metric dimension. Further result about the unbounded metric dimension of graphs was derived by Abbas et al. in [1] and U. Ali et al. in [27]. In this context, it is natural to ask for characterization of graphs with unbounded metric dimension. In this paper, we have extended this study and determined a family of graph that is deduced from wheel graph by removing k consecutive spokes and shown that this family of graph has unbounded metric dimension. It is also worth mentioning that this family of graph have many interesting graph-theoretic properties and have been studied intensively in the literature; for example the chromaticity of this family was investigated in [7]. In this paper, the exact value of metric dimension of W(n,k) is computed. Further, the exchange property for resolving set of W(n,k) has also been studied, it is shown that exchange property does not hold for the resolving sets of graph W(n,k).

    In what follows all indices i which do not satisfy inequalities 1in will be taken modulo n.

    A wheel graph denoted by Wn is defined as WnCn+K1, Where Cn:v1,v2,v3,,vn for n3 is cycle of length n. Suppose v1,v2,v3,...,vn are the vertices of the outer cycle Cn of Wn and v be the central vertex of Wn. If p,q be the positive integers such that 1p<qn, then vp+1,vp+2,vp+3,......,vq1 are the vertices in the gap determined by the vertices vp and vq, and the size of the gap is denoted by Gqp1 is qp1. Any two gaps Gqp1 and Gsr1 determined by the vertices vp,vq and vr,vs respectively are said to be the neighboring gaps if vq=vr.

    Definition: A wheel graph with k-consecutive missing spokes denoted by W(n,k) can be obtained by deleting k-consecutive spokes from the wheel graph denoted by Wn. The graph W(n,k) is depicted in the Figure 1. In the following theorem, the metric dimension of the graph W(n,k) is determined. The proof of this theorem is given at the end of this section.

    Figure 1.  The wheel graph W(n,k) with k-consecutive missing spokes.

    Theorem 2.1. Let W(n,k) denote the wheel graph with k-consecutive missing spokes with k1, then β(W(n,k))=2n2k25 for n5.

    To prove this theorem, we need to prove some lemmas.

    In the following result, the upper bound for the metric dimension of W(n,k) is derived.

    Lemma 2.1. For every positive integers n5 and k1, we have

    β(W(n,k)2n2k25.

    Proof. Let

    B={v5i2:2i2n2k251}{vnk1,vnk12}

    be a set of vertices of the graph W(n,k). In order to show that B is a resolving set for the graph W(n,k); we consider an arbitrary vertex yV(W(n,k)B).

    Then there are following possibilities for the choice of y:

    The vertex y belong to a gap of size k2+3 of B. From the construction of set B, it is evident that {v1,v2,v3,v4,vnk+i:k+12+1ik} are the vertices in the gap of size k2+3 determined by the vertices vnk+k+12 and v5. The representation of these vertices are given below:

    r(vi|B)={(ki+3,...,ki+3,ik+12),k+12+1ik ;(2,2,...,2,k+12),i=1;(2,2,...,2,k+12+1),i=2;(2,2,...,2,k+12+2),i=3;(2,2,...,2,k+12+2),i=4.

    Which shows that every vertex in the gap of size k2+3 has a unique representation (see Figure 2).

    Figure 2.  Resolving sets for graph W(20,4) and W(20,5).

    y belong to a gap of size k2 of B. From the construction of set B, it is evident that {v1,v2,v3,v4,vnk+i:k+12+1ik} are the vertices in the gap of size k2 determined by the vertices vnk+k+12 and v5. The representation of these vertices are given below:

    r(vi|B)={(i+2,i+2,...,i+2,i+1,k+12)i,0ik+121 ;(2,2,...,2,k+12),i=1;(2,2,...,2,k+12+1),i=2;(2,2,...,2,k+12+2),i=3;(2,2,...,2,k+12+2),i=4.

    Which shows that every vertex in the gap of size k2+3 has a unique representation (see Figure 2).

    y belong to a gap of size 2 of B. Let vp+1 and vp+2 be the vertices in the gap of size 2 determined by the vertices vp and vp+3. If y=vp+1, then it is the unique vertex that has distance 1 and 3 from vp and vn, respectively, and distance 2 from all other vertices of B. If y=vp+2, then it is again the unique vertex that has distance 1 and 3 from v3 and v3, respectively, and has distance 2 from all other vertices of B.

    y belong to a gap of size 1 of B. In this case, let vp+1 be the vertex in the gap of size one determined by the vertices vp and vp+2; then the vertex vp+1 is the unique vertex that has distance 1 from vp and vp+2.

    The above discussion implies that, every vertex of the graph W(n,k) has unique representation with respect to the set B. Hence B is a resolving set that show that

    β(W(n,k)2n2k25.

    If we delete the vertices vnk1,vnk2,,vn1,vn from the graph denoted by W(n,k), then the vertex set of the new graph denoted by G1 is

    V(G1)=V(W(n,k)){vnk+i:1ik}.

    From the construction, G1 is isomorphic to the join of the path graph Pnk and K1. That is G1Pnk+K1, as shown in Figure 3.

    Figure 3.  The graph G1W(n,k){vnk+i:1ik}.

    Lemma 2.2. Every basis of the graph G1 satisfy the following conditions:

    (i) A gap determine by any vertex from v1 to vnk is at most of size 3.

    (ii) There is at most one gap in the basis set of size 3.

    (iii) At least one of vnk,vnk1 and vnk2 must belong to basis set.

    (iv) The central vertex v does not belong to any of the basis.

    (v) If a gap in any of basis contains at least two vertices; then its neighboring gap contain at most one vertex

    Proof. Let B1 be the arbitrary basis of graph denoted by G1. We prove that B1 satisfy conditions (i)(v).

    (i): If there exist a gap of size 4 having the vertices {vp,vp+1,vp+2,vp+3}. But in this case, we have r(vp+1|B1)=r(vp+2|B2)=(2,2,2,...,2,2), a contradiction. Thus, any gap determine by any vertex from v1 to vnk is at most of size 3.

    (ii): Suppose on contrary, that there exist two gaps of size 3. Let {vp,vp+1,vp+2} and {vq,vq+1,vq+2} are the vertices in these two gaps. Then, we have r(vp+1|B)=r(vq+1|B)=(2,2,2,...,2,2), a contradiction. Hence, there is at most one gap in B1 of size 3

    (iii): At least one of vnk,vnk1 and vnk2 must belong to B1, otherwise vnk and vnk1 have same representation. Similarly one of the v1,v2 and v3 also belong to B1.

    (iv): Since v is at the distance 1 to all the vertices of G and can be removed from any resolving set. Therefore B1 being a minimal resolving set can not contain v. This implies that he central vertex v does not belong to B1.

    (v): Let there are two consecutive gaps of size at least 2 and {vp+1,vp+2} and {vp+4,vp+5} be the vertices in these gaps determined by vp, vp+3 and vp+3, vp+6, respectively. Then the vertices vp+2 and vp+4 have same representations, a contradiction. Hence, if a gap of B1 contains at least two vertices; then its neighboring gap contain at most one vertex.

    Lemma 2.3. Every subset of the vertex set of the graph G1 satisfying the conditions of Lemma 2.2 is a resolving set.

    Proof. Let B1 is a subset of V(G1 satisfying all the conditions of Lemma 2.2. Let yV(G1B1) be an arbitrary element, we show that y has unique representation. There are following possibilities for the choice of y.

    y belong to a gap of size 3 of B1. Assume that the vertices vp,vp+1,vp+2,vp+3,vp+4 belong to the rim vertices; where vp and vp+4B1. The vertex vp+1 then has distance one from vp and 2 from all other vertices of B1, and vp+2 then has distance 2 from all vertices of B1. Similarly the vertex vp+3 is it distance 1 from vp+4 and has distance 2 from all other vertices of B1. By condition (i) and (ii) of Lemma 2.2; these vertices have unique representation.

    y belong to a gap of size 2 of B1. Let the vertices vp,vp+1,vp+2,vp+3 belong to the rim vertices such that vp and vp+3B1. We have two cases here:

    If y1=vp+1, then it has distance 1 from vp and distance 2 from all other vertices of B1. By condition (v) of Lemma 2.2; these vertices have unique representation.

    If y1=vp+2, then it is at distance 1 from vp+3 and distance 2 from all vertices of B1. Again, by condition (v) of Lemma 2.2; these vertices have unique representation and no other vertex have this representation.

    y belong to a gap of size 1 of B1. Assume that {vp,y1,vp+1} belong to the rim vertices; where vp and vp+1B1. Then y is the only vertex having distance 1 from both the vertices vp and vp+1, so the representation of y is unique.

    Thus, we conclude that any set B1 satisfying all conditions of Lemma 2.2 is the resolving set of the graph G1Pnk+K1.

    In the following result, the metric dimension of the graph G1Pnk+K1 is computed.

    Lemma 2.4. For every positive integer m3, β(G1)=2m25, where m=nk.

    Proof. Define the set B1 as follows,

    B1={v1}{v5i12,2i2m251}{vm1}

    The set B1 satisfy all the conditions of Lemma 2.2. Therefore B1 is the resolving set for G1. Which shows that

    β(G1)=≤|B1|=2m25. (2.1)

    To prove the lower bound, let B1 be the basis for the graph G1. To show that |B1|2m25, we have the following two cases:

    Case 1: When |B1|=2l, where l1.

    If B1 has a gap of size 3, then from Lemma 2.2, B1 can contain at most one gap of size 3, l1 gaps of size 2, l gaps of size 1. So we have

    mB13+2(l1)+l
    m2l3+2l2+l
    lm15
    2l=|B1|2m25
    |B1|2m25.

    If B1 has no gap of size 3, then again from Lemma 2.2, B1 contain no gap of size 3, at most l gaps of size 2 and l gaps of size 1. Hence we have

    mB12l+l
    m2l3llm5
    2l=|B1|2m5
    |B1|2m52m25.

    Case 2: When |B1|=2l+1, where l1.

    If B1 has a gap of size 3; then from Lemma 2.2, B1 can contain at most one gap of size 3, l1 gaps of size 2 and l gaps of size 1. Therefore, we have

    mB13+2(l1)+l
    m(2l+1)3+2l2+l
    lm252l+12(m2)5+1
    2l+1=|B1|2m+15
    |B1|2m+152m25.

    If B1 has no gap of size 3, then again from Lemma 2.2, B1 contain no gap of size 3, at most l gaps of size 2 and l gaps of size 1. We have

    mB12l+l
    m(2l+1)2l+l
    lm152l+12(m1)5+1
    2l+1=|B1|2m+35
    |B1|2m+35
    |B1|2m+352m25.

    The above discussion implies that

    β(G1)2m25 (2.2)

    From Eqs (2.1) and (2.2), we get

    β(G1)=2m25.

    We now are in position to prove the main theorem of our paper.

    Proof of Theorem 2.1: The upper bound for the metric dimension of the wheel graph with k-consecutive missing spokes denoted by W(n,k) is given by Lemma 2.1:

    β(G1)=β(W(n,k))2n2k25, (2.3)

    where n5 and k1. On the other hand from the Lemma 2.4, we have

    β(G1)2m25,

    where G1W(n,k){vnk+i:1ik}. Now by putting the value of m=nk, we get

    β(G1)2m25=2n2k25.

    Since G1 is the subetaaph of graph W(n,k), therefore

    β(W(n,k))2n2k25. (2.4)

    Hence, from Equations (3) and (4), it follows that

    β(W(n,k))=2n2k25,

    where n5 and k1. This completes the proof.

    We have seen that a subset W of vertices of a graph G is a resolving set if every vertex in G is uniquely determined by its distances to the vertices of W. Resolving sets behave like bases in a vector space in that each vertex in the graph can be uniquely identified relative to the vertices of these sets. But though resolving sets do share some of the properties of bases in a vector space, they do not always have the exchange property from linear algebra. Resolving sets are said to have the exchange property in G if whenever S and R are minimal resolving sets for G and rR, then there exists sS so that (S{s}){r} is a minimal resolving set [2].

    If the exchange property holds for a graph G, then every minimal resolving set for G has the same size and algorithmic methods for finding the metric dimension of G are more feasible. Thus to show that the exchange property does not hold in a given graph, it is sufficient to show two minimal resolving sets of different size. However, since the converse is not true, knowing that the exchange property does not hold does not guarantee that there are minimal resolving sets of different size.

    The following results concerning exchange property for resolving sets were deduced in [2].

    Theorem 3.1. [2] The exchange property holds for resolving sets in trees.

    Theorem 3.2. [2] For n8, resolving sets do not have the exchange property in wheels Wn.

    The exchange property for resolving sets of the graph W(n,k) has been discussed in the next theorem.

    Theorem 3.3. The exchange property does not hold for the resolving sets of the graph W(n,k) for every positive integers nk10 and k1.

    Proof. To show that exchange property does not hold on the resolving sets of graph W(n,k), we need to show that there are two minimal resolving sets of different size.

    Since the set B={v5i2:2i2n2k251}{vnk1,vnk12} is the metric basis of the graph W(n,k), so indeed it is a minimal resolving set for W(n,k) having cardinality m=nk.

    Now define another subset of the vertex set of the graph W(n,k), for k+10 and k1 as follows:

    B={vnk2,v4i+1,v4j+2:1in2k24:1jn2k41}{vnk}{vnk12}

    B satisfy all the condition of Lemma 2.2, so is a resolving set of W(n,k) having cardinality n2k24+n2k4+1. Next, we show that B is also minimal resolving set by proving that there does not exist any bB such that B{b} is still a resolving set. There are the following three cases for the choice of b:

    Case 1: If b=vnk12; then removal of vnk2 would yield a gap of size k+2. By claim (1), this is not possible.

    Case 2: If b{v4i+1:1in2k24} then removal of b can be considered as follows: If b=v5 for i=1, then it would cause two vertices having same representation as r(v5|B)=r(v7|B)=(1,2,2,2,...,k2+3). When b=v9 for i=1, then it would cause two vertices having same representation, i.e. r(v9|B)=r(v11|B)=(2,2,1,2,...,k2+3). Similarly, we can show that if we remove any basis vertex v4i+1 for 1in2k24, then v4i+1 and v4i+3 will have the same representations.

    Case 3: If b{v4j+2:1jn2k41}. In this case by removing b=v6 for j=1, would cause two vertices having same representations which are r(v5|B)=r(v7|B)=(1,2,2,2,...,k12+3). If b=v9 for i=1, then it would cause two vertices having same representations, i.e. r(v9|B)=r(v11|B)=(2,2,1,2...,k12+3). Similarly, it can be shown that for any choice of the vertex b from the set of vertices {v4j+2:1j2n2k51}; the vertices v4j+1 and v4j+3 will have the same representations.

    This shows that B is a minimal resolving set, which completes the proof.

    The problem of determining whether β(G)<k is an NP-complete problem. It is natural to ask for characterization of graphs with bounded or unbounded metric dimension. In general, it appears unlikely that significant progress can be made in this regard unless it belongs to a class for which the distances between vertices can be described in some systematic manner. There have been significant work done in literature to explore the families of graphs with unbounded metric dimension (See [1,3,14,22,26,27]). In this context, we have explore a family that is constructed from wheel graph by removing k consecutive spokes and it is shown that this family of graph has unbounded metric dimension. This results also add further support to a negative answer of an open problem raised in [12]. It is further shown that exchange property for resolving set does not hold for this family of graphs.

    The authors are thankful to the referees for their valuable suggestions.

    The authors declare no conflict of interest.



    [1] I. Anshel, M. Anshel, D. Goldfeld, An algebraic method for public-key cryptography, Math. Res. Lett., 6 (1999), 287–291, https://doi.org/10.4310/MRL.1999.v6.n3.a3 doi: 10.4310/MRL.1999.v6.n3.a3
    [2] K. Ko, S. Lee, J. Cheon, J. W. Han, J. S. Kang, C. Park, New public-key cryptosystem using braid groups, In: M. Bellare, Advances in cryptology-CRYPTO 2000, Springer, 2000,166–183. https://doi.org/10.1007/3-540-44598-6_10
    [3] V. Shpilrain, A. Ushakov, The conjugacy search problem in public key cryptography: unnecessary and insufficient, Appl. Algebra Eng. Commun. Comput., 17 (2006), 285–289, http://doi.org/10.1007/s00200-006-0009-6 doi: 10.1007/s00200-006-0009-6
    [4] E. Sakalauskas, P. Tvarijonas, A. Raulynaitis, Key agreement protocol (KAP) using conjugacy and discrete logarithm problems in group representation level, Informatica, 18 (2007), 115–124. http://doi.org/10.15388/Informatica.2007.167 doi: 10.15388/Informatica.2007.167
    [5] M. Eftekhari, A Diffie-Hellman key exchange using matrices over non-commutative rings, Groups Complexity Cryptology, 4 (2012), 167–176. http://doi.org/10.1515/gcc-2012-0001 doi: 10.1515/gcc-2012-0001
    [6] M. Sracic, Quantum circuits for matrix multiplication, Comput. Sci. Phys. Math., 2011.
    [7] A. Myasnikov, A. Ushakov, Quantum algorithm for discrete logarithm problem for matrices over finite group rings, Groups Complexity Cryptology, 6 (2014), 31–36. http://doi.org/10.1515/gcc-2014-0003 doi: 10.1515/gcc-2014-0003
    [8] A. Myasnikov, A. Ushakov, Cryptanalysis of matrix conjugation schemes, J. Math. Cryptology, 8 (2014), 95–114. http://doi.org/10.1515/jmc-2012-0033 doi: 10.1515/jmc-2012-0033
    [9] A. Pandey, I. Gupta, D. K. Singh, On the security of DLCSP over GLn(Fq[Sr]), Appl. Algebra Eng. Commun. Comput., 34 (2023), 619–628. http://doi.org/10.1007/s00200-021-00523-6 doi: 10.1007/s00200-021-00523-6
    [10] D. Boneh, V. Shoup, A graduate course in applied cryptography, Draft 0.5, 2023.
    [11] P. Shor, Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer, SIAM Rev., 41 (1999), 303–332. http://doi.org/10.1137/S0097539795293172 doi: 10.1137/S0097539795293172
  • Reader Comments
  • © 2025 the Author(s), licensee AIMS Press. This is an open access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/4.0)
通讯作者: 陈斌, bchen63@163.com
  • 1. 

    沈阳化工大学材料科学与工程学院 沈阳 110142

  1. 本站搜索
  2. 百度学术搜索
  3. 万方数据库搜索
  4. CNKI搜索

Metrics

Article views(251) PDF downloads(58) Cited by(0)

Other Articles By Authors

/

DownLoad:  Full-Size Img  PowerPoint
Return
Return

Catalog