软McEliece：基于MDPC代码的McEliece密码系统，通过实值故意错误使用非常紧凑的密钥
Soft McEliece: MDPC code-based McEliece cryptosystems with very compact keys through real-valued intentional errors
摘要：
我们建议使用实值错误，而不是经典的位翻转故意错误的McEliece密码系统的基础上的中密度奇偶校验（MDPC）码。这允许最大限度地利用这些代码的纠错能力，通过使用软判决迭代解码算法，而不是硬判决位翻转解码器。然而，使用实值噪声产生的软可靠性值也可以被攻击者利用。我们设计了新的攻击程序，针对这一点，并计算相关的工作因素和安全级别。我们表明，对于一个固定的安全级别，这些新的系统实现了有史以来最短的公钥大小，减少了25%，相对于以前的建议。
英文摘要：
We propose to use real-valued errors instead of classical bit flipping intentional errors in the McEliece cryptosystem based on moderate-density parity-check (MDPC) codes. This allows to exploit the error correcting capability of these codes to the utmost, by using soft-decision iterative decoding algorithms instead of hard-decision bit flipping decoders. However, soft reliability values resulting from the use of real-valued noise can also be exploited by attackers. We devise new attack procedures aimed at this, and compute the relevant work factors and security levels. We show that, for a fixed security level, these new systems achieve the shortest public key sizes ever reached, with a reduction up to 25% with respect to previous proposals.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
