Attributed metadata history
Up to 100 retained publisher events per page for 4bd1c44cc95127a214f247743305d5aac01b978501681581b6d71ced76be3504. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_e53adb99e40ae66258
observed · 2026-10-12 16:25:04 UTC
ePrint Report: A Universal Forgery Attack on the Origami Signature Scheme from the Public Key Alone Hugo Louiso, Hao Guo, Peigen Li, Pierre Pébereau, Siyong Tao, Jintai Ding Origami is a multivariate signature scheme submitted to the NGCC round-1 public-key call. We show that the submitted bilinear construction is a Rainbow-type scheme whose central map is exposed. The verification map is the layered signing map in a public coordinate order. The public key therefore gives an equivalent secret key, allowing signature forgery at about the cost of one verification (about $0.01$s at Origami-128). Our attack exploits this public layered structure and succeeds against the unmodified reference implementation on all four parameter sets and the official test vectors. We also refute the security proof's inversion assumption in a bilinear independent-coefficient model. The hidden local algebras introduced by Origami do not prevent the attack. They raise a separate problem: the specification treats constrained matrix coordinates as independent, and honest signatures lie in a proper subspace.
Fingerprint: 0fb75ca010e37eebb69a472e65b712e4405dc1ed7f2588387a4ef2fe27208ac6
intelligence_src_e53adb99e40ae66258
observed · 2026-10-12 16:25:03 UTC
available
Fingerprint: 366cb966e32414edc1db353849a1ee8d6b8462b83786e04001881ba6594765ad