A long standing open question is whether the distinguisher of high rate alternant codes or Goppa codes \cite{FGOPT11} can be turned into an algorithm recovering the algebraic structure of such codes from the mere knowledge of an arbitrary generator matrix of it. This would allow to break the McEliece scheme as soon as the code rate is large enough and would break all instances of the CFS signature scheme. We give for the first time a positive answer for this problem when the code is {\em a generic alternant code} and when the code field size $q$ is small : $q \in \{2,3\}$ and for {\em all} regime of other parameters for which the aforementioned distinguisher works. This breakthrough has been obtained by two different ingredients : (i) a way of using code shortening and the component-wise product of codes to derive from the original alternant code a sequence of alternant codes of decreasing degree up to getting an alternant code of degree $3$ (with a multiplier and support related to those of the original alternant code); (ii) an original Gr\"obner basis approach which takes into account the non standard constraints on the multiplier and support of an alternant code which recovers in polynomial time the relevant algebraic structure of an alternant code of degree $3$ from the mere knowledge of a basis for it.
翻译:一个长期存在的开放问题是,高速可替代码或Goppa码\cite{FGOPT11}的区分器是否能够从仅知道其任意生成矩阵的信息转化为恢复码的代数结构的算法?当码率足够高时,这将允许破解McEliece方案,并将破解CFS签名方案的所有实例。我们当码是{\em 通用可替代码}时,首次为此问题给出了肯定的答案,当码域大小$q$较小:$q\in \{2,3\}$并且在其他参数的所有区域中,前述区分器有效。这一突破是通过两个不同的因素获得的:(i)一种使用码缩短和组件间乘积来从原始可替代码导出可减小度数的可替代码序列,直到获得一个度数为$3$的可替代码(其乘数和支持与原始可替代码有关);(ii)一种原始的Gr\"obner基础方法,考虑了可替换码的乘数和支持的非标准约束,它从仅知其基础的信息中用多项式时间恢复出度为3的可替换码的相关代数结构。