Paper 2025/2202

Disproving the Linearity of the Polynomials after the Pre-image Substitution in the System of the Third Attempt of MAYO

Anna Stefano Narivelomanana
Abstract

In this work, we analyze the mathematical aspect of the MAYO signature scheme. Following the specification of MAYO, we generate the keys where the secret key is a matrix and the public key is a system of quadratic polynomial of multiple variables; then use them to sign. During the signing procedure, we disprove the claim that the polynomial only has a constant part and a linear part after sampling values for the vinegar variables. Technically, we provide the mathematical expression of an arbitrarily polynomial of the system after substitution and discover that in addition of having a constant part and a linear part, the polynomial also has a quadratic part. The quadratic state of the polynomials after substitution allows us to conclude that signing fails with the third attempt of MAYO.

Note: This is a disproof of MAYO (the third attempt version).

Metadata
Available format(s)
PDF
Category
Public-key cryptography
Publication info
Preprint.
Keywords
quadraticpolynomialpublic keysign
Contact author(s)
annanarivelomanana07 @ gmail com
History
2025-12-08: approved
2025-12-05: received
See all versions
Short URL
https://ia.cr/2025/2202
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2025/2202,
      author = {Anna Stefano Narivelomanana},
      title = {Disproving the Linearity of the Polynomials after the Pre-image Substitution in the System of the Third Attempt of {MAYO}},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/2202},
      year = {2025},
      url = {https://eprint.iacr.org/2025/2202}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.