Gröbner Basis Cryptanalysis Ciminion and Hydra

This repository contains implementations of polynomials models for Ciminion and Hydra analyzed in https://arxiv.org/abs/2405.05040.

• For Ciminion:
  • The SageMath implementation contains a function that computes a DRL Gröbner basis for arbitrary number of rounds.
• For Hydra:
  • The SageMath implementation contains a function that verifies that a Hydra instance is in generic coordinates for arbitrary number of rounds and arbitrary number of samples.
  • With the OSCAR implementation one can compute the step degrees in F4 for Gröbner basis computations of Hydra.
  • With both implementations one can extract a zero-dimensional DRL Gröbner basis after a linear change of coordinates.

Requirements

• SageMath 10.4.
• OSCAR 1.2.0.