Abstract
Ward Beullens, a postdoctoral researcher at IBM Research, published a paper entitled "Breaking Rainbow Takes a Weekend on a Laptop" on the "Cryptology ePrint Archive". The paper suggests that the rainbow signatures currently submitted to the NIST POC Round 3 Security Level 1 can be cracked in a short time by a classic computer. (The paper has been tested in practice by the Rainbow Signature team, and the results show that the attack is effective.)
(While the Level 1 parameter sets clearly are clearly broken by the attack, its impact on the larger parameter sets is much more "moderate".)
(Rainbow team proposed to Nist to replace the Rainbow Level 1 parameters with our Level 3 parameters and Level 3 with Level 5 parameters.)
Since the parameters of the Rainbow Signature used by ABCMint (the ABCMint proprietary version of the Rainbow Signature) are similar to the security level 1 submitted to NIST, there are security concerns as well, which is the main reason for this upgrade plan.
Planning
The goal of this project is to update the current core PQC algorithm of ABCMint (the rainbow signature of ABCMint proprietary version) to the new version of rainbow signature with the parameters proposed by Prof. Ding, in order to fix the security vulnerabilities identified in the paper and achieve the goal of persistent security of ABCMint.
The project will officially start raising funds and recruiting developers for the project soon.
BY ABCMint PQC Round 1 Security Upgrade Committee (Third Party Community)
Discord:
https://discord.gg/4jQyMDFfmg
