耐量子計算機暗号の流行整理（2022年版）

この記事は [EAGLYS Advent Calendar 2022](https://qiita.com/advent-calendar/2022/eaglys_adcal) の25日目の記事です

昨年の記事 [耐量子計算機暗号ってどの方式が人気なの？符号ベース暗号は？調べてみました！](https://qiita.com/0917laplace/items/b6bebb6933053059d27a) の最新版の記事です

# そもそも耐量子計算機暗号って？
1994年に Shor という方が量子計算機を使うと，素因数分解や離散対数問題を多項式時間で計算できるアルゴリズムを提案しました．

[P. W. Shor, ``Algorithms for quantum computation: discrete logarithms and factoring'', Proceedings, 35th Annual Symposium on Fundamentals of Comp.Science (FOCS), pp.124-134, 1994.](https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=365700)

すると，量子計算機でも多項式時間で計算できないような新たな暗号方式が必要となってきます．
そこで，アメリカの偉い研究所であるNIST（日本でいうNICTとか）が耐量子計算機暗号の標準化プロジェクトを2016年から始めています．AESのときと同じ感じですね．

[NIST PQC標準化プロジェクトのHP](https://csrc.nist.gov/projects/post-quantum-cryptography)

＊ちなみに現在は第４Roundまで進んでいます

そのプロジェクトにおける大雑把な内訳としては，

- 格子暗号
- 符号ベース暗号
- 多変数多項式暗号
- 同種写像暗号
- その他（ハッシュ関数ベースなど）

となります．

また，上記とは別に最近「量子計算機による既存の共通鍵暗号への影響」というのも見られます．広い意味での耐量子計算機暗号として，こちらもカウントします．

＊こちらは最後に補足します

各方式の参考文献としては，次の書籍が挙げられます．

[縫田 光司，『耐量子計算機暗号』，森北出版，2020](https://www.morikita.co.jp/books/mid/087211)

[Daniel J. Bernstein，Johannes Buchmann，Erik Dahmen，『Post-Quantum Cryptography』，Springer，2009](https://link.springer.com/book/10.1007/978-3-540-88702-7)

＊縫田先生の書籍に関しては，下記の記事で書評をしていますので，ぜひそちらも（隙あらば宣伝）

[書籍『耐量子計算機暗号』の紹介](https://qiita.com/0917laplace/items/7c1535c3236c259e07ea)

# 調査方法
国内や国外の各学会の過去６年間における上記方式の発表件数をカウントします．ただし条件として

- 中身は確認せずにタイトルから方式を判断する（30秒以内に判断できない場合は「不明」とする）
- 対象とする学会は，国内が「SCIS」・「CSS」で，国外が「PQCrypto」・「Eurocrypt」・「Crypto」・「Asiacrypt」とする
- 上記の各学会の2017年〜2022年における発表件数をカウントする

を設けます．こうしないとさすがに大変すぎるので・・・．

＊「秘密計算」セッションでの格子暗号の発表だったり，「楕円曲線」とか「数論」セッションでの同種写像暗号の発表などもなるべく拾うようにしますが，正確な件数を知りたいわけではないので，漏れがあっても勘弁を・・・

＊なぜ過去６年を調査するのかというと，先ほどのNIST PQC標準化プロジェクトが2016年から始まったため，そこからどのように進展したのかに興味があるためです

ちなみに符号ベース暗号は「CBCrypto」という専門の学会があります（が，これをカウントすると趣旨がブレるのでやりません）

[CBCrypto 2023](https://www.cb-crypto.org/)


# 初手謝罪
次の項目から，各学会の発表件数をまとめています．ただまとめるだけでなく，どの発表がどの方式での発表なのかをまとめた表も載せています．

とすると，例えば，

- こいつはこの発表を格子にカウントしているけど，格子の話ほとんどなかったぞ・・・？
- ここには載っていない発表のカウント漏れしていないか・・・？
- タイトルには含まれていなかったけど，この発表は格子メインだったぞ・・・？

などの懸念があります．その場合はすみません（土下寝）．

特に最後につきましては，割と緩いカウントだなって僕自身も思っていますが，内容まで加味しようとすると，マジで５年かかります．５年かかったらまた５年分の発表を見ないといけなくなり・・・（以下略）．


# SCIS
国内で有名な暗号理論関係の学会です．毎年１月ぐらいにやっています．

後の「CSS」と比べると，耐量子計算機暗号の発表がかなり多いことがわかります．

| 方式 | 2023年 | 2022年 |2021年 | 2020年 | 2019年 | 2018年  | 2017年 |
|:---:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|
|格子  |  18  |  11  | 10  |  6 | 7  |  22 | 14  |
|符号  |  4  |  1  | 1  | 1  |  3 |  1 | 2  |
|多変数|  7  |  5  |  5 |  5 |  6 |  3 |  5 |
|同種  |  7  |  9  |  2 |  6 |  7 |  4 |  4 |
|共通鍵|  1  |  3  | 2  | 1  | 2  | 3  | 1  |
|その他|  5  |   0  | 0  |  0 | 2  |  2 |  0 |
|不明  |  1  |  6  | 3  |  2 | 4  | 2  |  1 |

<details><summary>2023年</summary><div>

[プログラム](https://www.iwsec.org/scis/2023/SCIS_2023_program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1A1-1|多変数多項式求解問題に基づく効率的な閾値リング署名|多変数|
|1A1-2|A MinRank attack against variants of UOV signature scheme|多変数|
|1A1-3|Rank符号ベース暗号への量子的な攻撃手法の提案とその安全性解析|符号|
|1A1-4|Secure Parameters for Multivariate Polynomial Signature Scheme QR-UOV|多変数|
|1A1-5|Efficient Software Implementation of Signature Scheme QR-UOV|多変数|
|1A2-1|Threshold Signature Schemes based on Isogney|同種|
|1A2-2|近似イデアル分解問題に基づく不定方程式暗号|格子|
|1A2-3|符号ベース暗号に対する分散復号方式|符号|
|1A2-4|Compact Broadcast Encryption from LWE|格子|
|1A2-5|Revisiting Fiat-Shamir Signatures under Superposition Attacks|その他|
|1B3-1|TFHEに基づくクライアント補助型閾値完全準同型暗号|格子|
|1B3-2|ゲート数が少ないbinary adder treeとmulti-key TFHEを用いた性能評価|格子|
|1B3-3|準同型暗号TFHE上の任意精度演算のための冗長表現による多並列化|格子|
|1B3-4|Integer-wise型TFHEの算術演算の高速化|格子|
|1C1-1|暗号化と復号の実行速度が等しい耐量子ラージブロック暗号の構成|共通鍵|
|1C3-1|コンパクトな同種写像ベースパスワード認証鍵交換|同種|
|1D3-1|量子計算によるLWE問題のSearch-to-Decision帰着|格子|
|2A1-1|新たなNP困難な Morphism of Polynomials 問題に基づいた本人確認方式|多変数|
|2A1-2|QC-MDPC符号に基づくMcEliece暗号系に対するADMM復号法について|符号|
|2A1-3|空間計算量を考慮したM4GBアルゴリズム|多変数|
|2A1-4|Towards a Fine-grained Analysis of the Syndrome Decoding Problem: An implementation and comparison of modern ISD algorithms|符号|
|2A2-1|Kyberの耐量子計算機匿名性（概要版）|格子|
|2A2-2|Generating Falcon Trapdoors via Gibbs Sampler|格子|
|2A2-3|耐量子計算機署名ModFalconの拡張命令セットAVXによる実装評価|格子|
|2A2-4|Radix-4 NTTを適用したCRYSTALS-DilithiumのTLS通信における性能評価|格子|
|2A4-1|PQScale: A post-quantum signature aggregation algorithm|その他|
|2B1-1|格子問題に基づく効率的な耐量子accumulatorの提案|格子|
|3B1-1|不定方程式暗号Giophantus+に対する準同型演算|格子|
|3B4-1|種数3における分解 Richelot 同種写像計算アルゴリズムとその応用|同種|
|3B4-2|C++用ライブラリを用いたCSIDHの高速実装|同種|
|3B4-3|同種写像に基づく暗号アルゴリズムの高性能ハードウェア実装|同種|
|3B4-4|SIDHに対する攻撃の条件緩和について|同種|
|3B4-5|モジュラー多項式の拡張|同種|
|4A1-1|不定方程式暗号のソフトウェア実装における高速化について|格子|
|4A1-2|Cryptanalysis of the randomized version of DRS scheme|不明|
|4A1-3|MQ問題を解くための改良されたHybrid approachの計算量評価|多変数|
|4A1-4|近似イデアル分解問題に基づく不定方程式暗号に対する鍵復元攻撃の計算量評価|格子|
|4A1-5|Proposing a Trade-off SVP-solving Strategy by Improving pnj-BKZ Simulator|格子|
|4A2-1|探索Module-LWE問題に対する格子攻撃の実験報告|格子|
|4A2-2|符号付き整数に対する効率的な剰余乗算|その他|
|4A2-3|素因数分解問題に対するShorアルゴリズムの実装と量子計算機シミュレータを用いた実験|その他|
|4A2-4|バイナリECDLPに対するShorのアルゴリズムの量子ビット削減|その他|
|4B2-2|A Lattice-based Ring Signature Scheme Secure against Key Exposure|格子|


</div></details>

<details><summary>2022年</summary><div>

[プログラム](https://www.iwsec.org/scis/2022/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1A1-1|数体篩法実装は双子smooth素数の探索に役立つか?|不明|
|1A1-2|Quantum Resistance on Modes of Operation in Block Ciphers|共通鍵|
|1A1-3|Practical Lattice-based Threshold Signature|格子|
|1A1-4|SABERにおける数論変換のC言語実装|格子|
|1A1-5|A study of the Kipnis-Shamir approach against the Rainbow signature scheme|多変数|
|1A1-6|多変数多項式署名Rainbowに対する新たな乱数固定のフォルト攻撃|多変数|
|1A2-1|NIST PQC Round3候補の鍵カプセル化方式の匿名性|不明|
|1A2-2|同種写像暗号B-SIDHの実験による計算量評価と効率的な素数pの条件|同種|
|1A2-3|耐量子計算機暗号署名Mod FalconのToom-Cook法及びRadix4 FFTによる高速化|格子|
|1A2-4|近似イデアルGCD問題に基づく不定方程式暗号のバリエーションについて|多変数|
|1A2-5|A new efficient variant of the XL algorithm using the arithmetic over polynomial matrices|多変数|
|1A2-6|MQ問題の解決のためのHybrid approachの改良の検討|多変数|
|1A3-2|被覆攻撃の対象となる偶標数有限体上の楕円・超楕円曲線に対する同種条件下の完全分類|同種|
|1A3-3|メッセージ長を拡張する耐量子コミットメント方式|格子|
|1C1-1|耐量子鍵カプセル化メカニズムに対する一般化サイドチャネル攻撃|不明|
|1C4-4|ECDSAハードウェア実装におけるテンプレート攻撃と格子攻撃による秘密鍵復元の検討|格子|
|1F1-2|倍ブロック長圧縮関数の量子衝突計算困難性について|共通鍵|
|1F2-3|Bernstein-Vazirani量子アルゴリズムに基づくランダムブール関数の隠れシフト問題の求解について|共通鍵|
|2A1-1|格子暗号におけるノイズの数論変換の実装について|格子|
|2A1-2|SQISignの公開鍵の安全性 |同種|
|2A1-3|SIKEに対するvOW法の内部関数の新計算手法|同種|
|2A1-4|Implementations on identity-based signature schemes based on variants of CSIDH|同種|
|2A2-1|NIST PQC Round3候補の鍵カプセル化方式への故障注入攻撃|不明|
|2A2-2|Web PKI 業界が耐量子計算機暗号への移行を急がなくて良い 3 つの理由|不明|
|2A2-3|NTRU格子の拡張と格子攻撃|格子|
|2A2-4|トレース写像を用いたRing-LWE問題に対する格子攻撃の再考|格子|
|2A5-1|New Post-Quantum Digital Signature Scheme based on MinRank Problem|不明|
|2A5-2|適切な素数選択によるKLPTアルゴリズムを利用した同種写像構成計算|同種|
|2A5-3|Montgomery曲線のx座標を用いた3-同種計算の最小演算コスト |同種|
|2A5-4|超特別アーベル多様体によるエクスパンダー族の構成とその暗号応用に向けて|同種|
|3A2-1|低リソースデバイス制御のための匿名放送型認証技術の提案|格子|
|4A1-1|Optimal Lattice Trapdoor for the Klein-GPV and Peikert Sampler|格子|
|4A2-1|Multi-Parallel MMTアルゴリズムによる高次元SDPの解読 |符号|
|4A2-2|Tuple Sieve Algorithmの並列化の提案 |格子|
|4A2-3|Cryptographic application based on ordinary isogeny graphs|同種|

</div></details>

<details><summary>2021年</summary><div>

[プログラム](https://www.iwsec.org/scis/2021/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|2A2-3|Revisiting an improvement to the quaternion analogue of the l-isogeny path problems|同種|
|2A2-4|Towards Improving Lattice Attacks on (EC)DSA|格子|
|2B3-4|3ラウンドFeistel-KF構造に対する量子鍵回復攻撃|共通鍵|
|2B3-5|Bernstein-Vazirani量子アルゴリズムに基づく周期発見を用いた3ラウンドFeistel暗号に対する量子識別攻撃とその検証|共通鍵|
|2A3-1|格子基底の順序変更によるENUMの計算量削減の考察|格子|
|2A3-2|LWE問題に対するBKZアルゴリズムのブロックサイズに関する考察|格子|
|2A3-3|LWR問題に対するBai-Galbraith埋込法の格子に現れる最短ベクトル|格子|
|2A3-4|Optimal DeepLLL系基底簡約の停止性の証明と計算量評価|格子|
|2A3-5|代数構造を持つ格子上の最短ベクトル探索アルゴリズムの開発|格子|
|2E3-1|暗号仮想通貨の長期利用可能性：ブロックチェーンと分散台帳との耐量子版|不明|
|2E3-2|量子計算機がブロックチェーンの安全性へ及ぼす影響とその対策|不明|
|3B1-4|Signalに適用可能な耐量子認証鍵交換プロトコルの設計と実装|不明|
|3D1-2|楕円曲線DSAに対する格子簡約攻撃に必要なナンス漏洩ビット数について|格子|
|3A3-1|格子暗号CRYSTALS-KYBERとSABERに対する鍵再利用攻撃の提案|格子|
|3A3-2|格子暗号SABERに対する鍵不一致攻撃|格子|
|3A3-3|Public Key Cryptosystems Combining Lattice and Multivariate Polynomial|格子・多変数|
|3A3-4|Security analysis on an El-Gamal-like multivariate encryption scheme based on a generalization of IP2S problem|多変数|
|3A3-5|多変数公開鍵暗号の安全性評価におけるグレブナ基底計算での多項式選択|多変数|
|3A4-1|近似イデアルGCD問題に基づく不定方程式暗号|多変数|
|3A4-2|近似イデアルGCD問題に基づく不定方程式暗号に対するイデアル分解攻撃の考察|多変数|
|3A4-3|Edwards曲線における高速な高次の同種写像計算方式|同種|
|3A4-4|Dumerのアルゴリズムのマルチスレッド化による高次元SDPの求解|符号|

</div></details>

<details><summary>2020年</summary><div>

[プログラム](https://www.iwsec.org/scis/2020/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1A1-5|Montgomery曲線における同種写像計算の高速化について|同種|
|2A1-1|効率的なタグ生成を用いた署名サイズの小さい格子ベース署名方式|格子|
|2A1-3|量子ランダムオラクルモデルで安全性証明可能な格子ベースのマルチ署名方式の実現に向けて|格子|
|2A1-5|符号ベース公開鍵暗号HQCにおける復号誤り確率の理論的解析|符号|
|3A1-1|一方向性を仮定した不定方程式暗号のバリエーションに関する考察|多変数|
|3A1-2|ノイズを利用した多変数公開鍵暗号|多変数|
|3A1-3|A Structural Attack on Block-Anti-Circulant UOV at SAC 2019|多変数|
|3A1-4|グレブナ基底を用いたMQ問題の求解|多変数|
|3A1-5|Implementation of Tree-based Dynamic Group Key Exchange with NewHope|格子|
|3A2-1|On the First Fall Degrees of Small Field Type MPKCs|多変数|
|3A2-2|Cryptanalysis of Giophantus(TM) Schemes against Hybrid Attack|格子|
|3A2-3|格子暗号NewHopeに対する鍵不一致攻撃の改良|格子|
|3A2-4|UV3000とGeneral Sieve Kernel を用いたIdeal Lattice Challenge と SVP Challenge の解読結果|格子|
|4A2-1|次数固定同種写像問題と関連した問題群の計算帰着について|同種|
|4A2-2|同種写像パス探索問題に対する中間一致攻撃のハイブリッド手法|同種|
|4A2-3|同種写像暗号CSIDHのEdwards曲線のw座標による構成について|同種|
|4A2-4|同種写像暗号CSIDHにおける最適な秘密鍵空間の考察|同種|
|4A2-5|Isogeny-Based Authenticated Key Exchange Protocol from CSIDH with Tight Security Proof|同種|
|2B2-4|White-Box Symmetric Cipher Using Quantum Memory|共通鍵|
|2B3-3|HSM上での耐量子暗号の実装と評価|不明|
|1D1-5|Post-quantum zk-SNARKs for Arithmetic Circuit|不明|

</div></details>


<details><summary>2019年</summary><div>

[プログラム](https://www.iwsec.org/scis/2019/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1D1-5|ハードウェアセキュリティモジュールへの耐量子計算機暗号の実装と評価|不明|
|1A2-1|Middle-Product LWE に基づく格子ベース署名|格子|
|1A2-2|任意の環におけるイデアル格子問題に基づいた本人確認方式|格子|
|1A2-3|標準モデルにおけるRLWEに基づく鍵カプセル化メカニズム|格子|
|1A2-4|Tightな安全性を持つ格子ベースマルチ署名|格子|
|2B1-4|Davies-Meyer圧縮関数の原像計算に対する量子クエリ計算量下界の改善|共通鍵|
|2D1-5|Implementing Post-Quantum Key Exchange Protocols on a Smartwatch using Multithreading Approach in JavaScript|不明|
|2B2-5|改良されたType-1一般化Feistel暗号に対する量子識別攻撃|共通鍵|
|2B4-4|アニーリングを用いた格子問題の求解|格子|
|2B4-5|アニーリングを用いた多変数多項式暗号解析|多変数|
|3A1-1|DHL: Dynamic Key Exchange from Homomorphic Encryption based on Lattice|格子|
|3B1-1|On the security of Cayley hash functions based on LPS-type Ramanujan graphs|その他|
|3B1-2|Proposals of Message-Dependent Transformation and Its Application For Augmenting MVPKC and CBPKC|多変数|
|3B1-3|Experimental Analysis for Linear Algebraic Attack on a Variant of Indeterminate Equation Public-Key Cryptosystems|多変数|
|3B1-4|不定方程式暗号のバリエーションに対する鍵復元攻撃に関する考察|多変数|
|3B1-5|量子安全な順序付きアグリゲートメッセージ認証コードについて|不明|
|3B2-1|制約付きMP問題に基づいた多変数公開鍵暗号方式|多変数|
|3B2-2|A New Family of Isomorphism of Polynomials and Its Applications to Public Key Encryption Scheme|その他|
|3B2-3|符号ベース暗号方式と多変数多項式ベース暗号方式を組み合わせた暗号方式の構築法|符号・多変数|
|3B2-4|Parallel Implementation and Comparison of Lattice-based Digital Signature Schemes using JavaScript|格子|
|3B2-5|Practical Attack on RaCoSS-R|符号|
|3B2-6|高密度パリティ検査行列を用いた2元シンドローム復号問題に基づく認証方式について（II）|符号|
|3A3-5|量子の国のブラックボクス帰着不可能性|不明|
|3B3-1|ツイストを利用したSIDH|同種|
|3B3-2|同種写像暗号CSIDHの計算量評価と高速化パラメータ|同種|
|3B3-3|同種写像暗号のCSIDHを用いたグループ鍵共有方式とその応用|同種|
|3B3-4|同種写像を用いた1ラウンド認証グループ鍵共有|同種|
|3B3-5|CSIDHに基づくパスワードベース認証鍵交換|同種|
|3B4-2|任意の奇数次同種写像を用いた暗号方式の計算量考察|同種|
|4B2-3| Veluの公式による同種写像問題の連立代数方程式への帰着と求解|同種|

</div></details>


<details><summary>2018年</summary><div>

[プログラム](https://www.iwsec.org/scis/2018/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1A2-3|格子問題の困難性に基づく多重暗号の構成|格子|
|1B2-1|UOVのOnline/Offline化の研究|多変数|
|1B2-2|ナップザック暗号M16重み制限方式の安全性検証実験|その他|
|1B2-3|「非線型不定方程式に基づく公開鍵暗号」への実時間攻撃|不明|
|1B2-4|不定方程式暗号における鍵復元攻撃の改良及びパラメータの考察|格子|
|1B2-5|An Improvement on the Linear Algebraic Attack for the Indeterminate Equation Encryption Scheme|その他|
|1B2-6|A Variant of Quantum Information Set Decoding Algorithms|符号|
|2B1-1|Ding Key Exchange -- A Proposal to NIST PQC Competition|格子|
|2B1-2|Security Evaluation for Ding Key Exchange|格子|
|2B1-3|AtLast: Another Three-party Lattice-based PAKE Scheme|格子|
|2B1-4|Revisiting CK17 Linearly Homomorphic Ring Signature based on Ring-LWE|格子|
|2B1-5|LWE問題に基づく時限機能付き階層型ID ベース完全準同型暗号の構成|格子|
|2B2-4|準同型暗号に用いるRing-LWEの安全性について|格子|
|2B2-5|DeepLLL簡約基底の解析とDeepBKZの高速計算法の提案|格子|
|2B2-6|双対版DeepBKZ基底簡約の開発とLWEチャレンジ解読への適用|格子|
|2C2-3|4ラウンドFeistel暗号に対する量子選択暗号文攻撃|共通鍵|
|2C2-4|量子中間一致攻撃と一般Feistel構造への応用|共通鍵|
|2C2-5|Validating IGE Mode of Block Cipher from Quantum Adversaries|共通鍵|
|2B4-1|同種写像部分木計算とその暗号方式への応用|同種|
|2B4-2|SIDH 認証鍵共有|同種|
|2B4-3|超特異性判定アルゴリズムの効率化とその暗号応用|同種|
|2B4-4|同種写像に基づくUnified Model認証鍵交換プロトコル|同種|
|3C1-1|Ring-LWEを用いたセキュアな行列乗算のためのパッキング方法|格子|
|3C1-2|Inproved Decoding Algorithm for Lattice Trapdoor Function|格子|
|3C1-3|幾何学的方法による高効率な格子逆像サンプリング法|格子|
|3C1-4|モンゴメリリダクションの改良によるNTTの高速化|格子|
|3C1-5|QChain: Quantum-resistant and Decentralized PKI using Blockchain|格子|
|3B2-1|BLISS格子ベース署名に対しるサイドチャネル攻撃および整数上LWE問題について|格子|
|3A3-6|量子コンピュータの公開鍵基盤に与える影響と対策|不明|
|3A4-1|Performance Evaluation of liboqs in Open Quantum Safe Project (Part I)|格子|
|3A4-2|Prey on Lizard : Mining Secret Key on Lattice-based Cryptosystem|格子|
|3A4-3|角度に基づく格子基底の判定条件：α-reduced|格子|
|3A4-4|Portable implementation of post-quantum encryption schemes and key exchange protocols on JavaScript-enabled platforms|格子|
|4A1-1|An Efficient Decryption Algorithm for Extension Field Cancellation|多変数|
|4A1-2|整数計画法を用いた平文回復攻撃による二値行列LWE暗号の安全性評価|格子|
|4A1-3|多変数多項式暗号の暗号化の効率化|多変数|
|4B1-3|Almost Fully Secured Fully Dynamic Lattice-based Group Signatures with Verifier-local Revocation|格子|

</div></details>


<details><summary>2017年</summary><div>

[プログラム](https://www.iwsec.org/scis/2017/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|2B2-5|繰返しEven-Mansour暗号に対する量子関連鍵攻撃について|共通鍵|
|2B3-1|A Classification of Lattice-based Trapdoor Functions|格子|
|2B3-2|格子に基づく非ゼロ内積暗号|格子|
|2B3-3|Design of New Linearly Homomorphic Signatures on Lattice|格子|
|2B3-4|計算効率の良い落とし戸付一方向関数の逆像計算処理|格子|
|2B3-5|認証鍵交換方式 FSXY の格子ベース実装と評価|格子|
|2B3-6|Timing and Fault Attacks on Lattice-based Cryptographic Libraries|格子|
|2B4-1|Experimental Analysis of LWE Problem|格子|
|2B4-2|DeepLLLにおけるグラムシュミットベクトル更新の高速化|格子|
|2B4-3|New variants of DeepLLL for decreasing squared-sum of Gram-Schmidt lengths|格子|
|2B4-4|Slide簡約基底に対する最短ベクトル探索の最悪時計算量評価|格子|
|2B4-5|Attacks against search Poly-LWE|格子|
|2B4-6|SIS問題の計算量評価|格子|
|2F4-2|量子ランダムオラクルモデルにおけるSigncryptionの構成法|不明|
|2F4-4|CCA2 Key-Privacy for Code-Based Encryption in the Standard Model|符号|
|2F4-5|Perfectly Binding Code-Based Commitment Schemes|符号|
|3F1-6|Fully Secure Lattice-based Group Signatures with Verifier-local Revocation|格子|
|3B2-1|楕円曲線同種写像のペアリング暗号への新しい応用|同種|
|3B2-2|超特異楕円曲線の同種写像を用いた擬似ランダム関数の構成|同種|
|3B2-3|同種写像を用いた置換有理関数の生成手法|同種|
|3B2-4|SIDH鍵共有法における効率的な計算法|同種|
|3F2-2|Efficient packing method for secure matrix multiplication over Ring-LWE somewhat homomorphic encryption|格子|
|3A3-1|多項式写像を用いた鍵共有方式|多変数|
|3A3-2|Revisiting the Efficient Key Generation of ZHFE|多変数|
|3A3-3|多変数多項式暗号の暗号化速度の改良|多変数|
|3A3-4|On Gu's Attack Against Simple Matrix Scheme|多変数|
|3A3-5|SVSv - A New Multivariate Signature Scheme with Vinegar|多変数|

</div></details>


# CSS
こちらも国内で有名な暗号理論関係の学会です
毎年10月ぐらいにやっています

| 方式 |2022年 |2021年 | 2020年 | 2019年 | 2018年  | 2017年 |
|:---:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|
|格子  |  6 |  0 | 2 |  0 | 1  | 3  |
|符号  |  1 |  0 |  0 |  0 | 0  | 1  |
|多変数|  2 |  1 |  5 |  0 |  1 |  0 |
|同種  |  1 |  0 |  1 |  1 |  0 |   0|
|共通鍵|  0 |  1  | 0  | 0  | 1  |  0 |
|その他|  3 |  1 |  0 |  0 |  0 |  0 |
|不明  |  0 | 1  |  1 |  0 |  0 |  1 |


<details><summary>2022年</summary><div>

[プログラム](https://www.iwsec.org/css/2022/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1A3-II-4|Log-size格子ベースaccumulatorによるゼロ知識証明の一般的なSIS問題への展開|格子|
|2A3-III-5|短期秘密鍵漏洩耐性を持つIoT向け耐量子認証鍵交換|格子|
|2A3-IV-1|近似イデアルGCD問題に基づく不定方程式暗号のC言語による実装とKaratsuba法による高速化について|格子|
|2A3-IV-2|同種写像暗号CSIDHのHesse曲線による構成|同種|
|2A3-IV-3|高速演算可能なRing-LWEベースの定義体拡張|格子|
|2A3-IV-4|KyberとSaberの耐量子計算機安全性（概要版）|格子|
|2A3-IV-5|Yamakawa-Zhandry の量子優位性に関して|その他|
|3B-III-1|量子FLT逆元計算アルゴリズムの改良|その他|
|3B-III-2|Gröbner基底計算のためのMXL4アルゴリズムの提案|多変数|
|3B-III-3|UOV多項式系に対するHilbert級数について|多変数|
|3B-III-4|符号ベース暗号に対する量子的な安全性の解析|符号|
|3B-III-5|Pointer networkを用いたトラップドア付きKnapsack問題の解法|その他|
|4B-II-4|Lattice Trapdoorに依存しない格子を基にしたIDベースマルチ署名に向けて|格子|

</div></details>

<details><summary>2021年</summary><div>

[プログラム](https://www.iwsec.org/css/2021/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|3E2-1|3ラウンドFeistel暗号に対するGroverのアルゴリズムを用いた効率的な鍵回復攻撃|共通鍵|
|3E3-2|A New Fault Attack on UOV Multivariate Signature Scheme|多変数|
|3E3-3|MinRank Based Three-Pass Identification Scheme with Half Cheating Probability|その他|
|3E3-4|標準モデル安全な耐量子一方向匿名認証鍵交換|不明|

</div></details>


<details><summary>2020年</summary><div>

[プログラム](https://www.iwsec.org/css/2020/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1D4-3|A Construction of Group Oriented Attribute Based Encryption Scheme from Lattices|格子|
|1D4-4|効率的な格子問題に基づくSemi-Adaptive安全な内積暗号|格子|
|1D5-1|A New Trapdoor for Constructing Multivariate Signature Schemes: Simple Matrix Signature Scheme|多変数|
|1D5-2|A New Variant of Unbalanced Oil and Vinegar Using Quotient Ring: QR-UOV|多変数|
|1D5-3|A Vulnerability on an Efficient Signature Generation Using Precomputation for UOV|多変数|
|1D5-4|On the Weil Descent Attack against the Multivariate Quadratic Problem|多変数|
|3D5-1|SiGamal: A Supersingular Isogeny-Based PKE|同種|
|3D5-2|New Complexity Estimation on the Rainbow-Band-Separation Attack|多変数|
|3D5-3|耐量子計算機暗号のHSMへの実装方法とそのCryptographic boundary構成方法についての考察|不明|

</div></details>


<details><summary>2019年</summary><div>

[プログラム](https://www.iwsec.org/css/2019/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|1F3-4|同種写像暗号CSIDHにおける秘密鍵の衝突可能性について|同種|

</div></details>


<details><summary>2018年</summary><div>

[プログラム](https://www.iwsec.org/css/2018/program.html)

|発表番号|タイトル|分野|
|-------|-----|----|
|2A2-2|Type-1一般化Feistel暗号に対する量子識別攻撃の改良|共通鍵|
|2A2-4|A Continuous Genetic Algorithm for Optimizing Pruning Function for Lattice Enumeration|格子|
|2A3-2|Estimating Secure Parameters for the Multivariate Encryption Scheme EFCp|多変数|

</div></details>


<details><summary>2017年</summary><div>

[プログラム](https://www.iwsec.org/css/2017/program.htm)

|発表番号|タイトル|分野|
|-------|-----|----|
|1E4-1|Tame Transformation Methodの安全性強化手法に対する安全性再考|不明|
|1E4-2|LWR問題解読のためのサンプル増幅法を用いたBKWアルゴリズム|格子|
|1E4-3|LDPC符号を用いたゼロ知識証明型認証方式について（II）|符号|
|1E4-4|Efficient Implementation of discrete Gaussian sampling for Lattice-based Cryptography using JavaScript|格子|
|1E4-5|確率的格子点探索の計算量の下界について|格子|

</div></details>

# PQCrypto
耐量子計算機暗号に絞った国際学会です．どの方式もバランスよく採用されてて良いですね（何が？）．

先ほどのNISTのPQC標準化プロジェクトは2016年のこの国際会議で通知されたぐらい有名です．

| 方式 |2021年 |2021年 | 2020年 | 2019年 | 2018年  | 2017年 |
|:---:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|
|格子  | 3  | 8  |  6 | 8  |  4 |  6 |
|符号  | 7  | 4  | 3  |  3 |  4 |  6 |
|多変数| 6  |  3 |  7 | 0  |  4 |  8 |
|同種  | 3  | 3  | 4  |  3 |  2 |  2 |
|共通鍵| 0  |  0  | 1  | 0  | 0  | 0  |
|その他| 1  |  1 |  0 |  2 |  4 |  2 |
|不明  | 0  |  0 |  0 |  0 |  0 |  0 |

<details><summary>2022年</summary><div>

[プログラム](https://2022.pqcrypto.org/schedule.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Implementation and Side channel attacks|A Power Side-Channel Attack on the Reed-Muller Reed-Solomon Version of the HQC Cryptosystem|符号|
|Implementation and Side channel attacks|A New Key Recovery Side-Channel Attack on HQC with Chosen Ciphertext|符号|
|Code-Based Cryptography|Hybrid Decoding — Classical-Quantum Trade-Offs for Information Set Decoding|符号|
|Code-Based Cryptography|How to Backdoor (Classic) McEliece and How to Guard Against Backdoors|符号|
|Code-Based Cryptography|LRPC codes with multiple syndromes: near ideal-size KEMs without ideals|符号|
|Code-Based Cryptography|Interleaved Prange: A New Generic Decoder for Interleaved Codes|符号|
|Code-Based Cryptography|A Study of Error Floor Behavior in QC-MDPC Codes|符号|
|Invited talk 1|Hash-Based Signatures: History and Challenges|その他|
|Multivariate Cryptography and the MinRank Problem|Improvement of algebraic attacks for superdetermined MinRank|多変数|
|Multivariate Cryptography and the MinRank Problem|A New Fault Attack on UOV Multivariate Signature Scheme|多変数|
|Multivariate Cryptography and the MinRank Problem|MR-DSS — Smaller MinRank-based (Ring-)Signatures|多変数|
|Multivariate Cryptography and the MinRank Problem|IPRainbow|多変数|
|Multivariate Cryptography and the MinRank Problem|2F - A New Method for Constructing Efficient Multivariate Encryption Schemes|多変数|
|Lattice-Based Cryptography, and Cryptanalysis|Forward-Secure Revocable Secret Handshakes from Lattices|格子|
|Lattice-Based Cryptography, and Cryptanalysis|Estimating the Hidden Overheads in the BDGL Lattice Sieving Algorithm|格子|
|Lattice-Based Cryptography, and Cryptanalysis|Breaking Category Five SPHINCS+ with SHA-256|格子|
|Isogeny|On Actively Secure Fine-Grained Access Structures from Isogeny Assumptions|同種|
|Isogeny|Attack on SHealS and HealS: the Secdond Wave of GPST|同種|
|Isogeny|Post-Quantum Signal Key Agreement from SIDH|同種|
|Invited talk 3|Breaking Rainbow takes a weekend on a laptop|多変数|

</div></details>


<details><summary>2021年</summary><div>

[プログラム](http://pqcrypto2021.kr/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|1.1 Code-Based Cryptography|Decoding Supercodes of Gabidulin Codes and Applications to Cryptanalysis|符号|
|1.1 Code-Based Cryptography|LESS-FM: Fine-tuning Signatures from the Code Equivalence Problem|符号|
|1.1 Code-Based Cryptography|Classical and Quantum algorithms for generic Syndrome Decoding problems and applications to the Lee metric|符号|
|1.2 Multivariate Cryptography|Improving Thomae-Wolf Algorithm for Solving Underdetermined Multivariate Quadratic Polynomial Problem|多変数|
|1.2 Multivariate Cryptography|New Practical Multivariate Signatures from a Nonlinear Modifier|多変数|
|1.2 Multivariate Cryptography|On the Effect of Projection on Rank Attacks in Multivariate Cryptography|多変数|
|1.3 Quantum Algorithms|Quantum Key Search for Ternary LWE|格子|
|1.4 Implementation and Side Channel Attack|Differential Power Analysis of the Picnic Signature Scheme|その他|
|1.4 Implementation and Side Channel Attack|Implementation of Lattice Trapdoors on Modules and Applications|格子|
|1.4 Implementation and Side Channel Attack|Fast NEON-based Multiplication for Lattice-based NIST Post-Quantum Cryptography Finalists|格子|
|2.1 Isogeny|CSI-RAShi: Distributed Key Generation for CSIDH|同種|
|2.1 Isogeny|SimS: a Simplification of SiGamal|同種|
|2.1 Isogeny|Memory Optimization Techniques for Computing Discrete Logarithms in Compressed SIKE|同種|
|3.2 Lattice Based Cryptography|Generating Cryptographically-Strong Random Lattice Bases and Recognizing Rotations of Z^n|格子|
|3.2 Lattice Based Cryptography|Zero-Knowledge Proofs for Committed Symmetric Boolean Functions|格子|
|3.2 Lattice Based Cryptography|Short Identity-Based Signatures with Tight Security from Lattices|格子|
|3.2 Lattice Based Cryptography|On Removing Rejection Conditions in Practical Lattice-Based Signatures|格子|
|3.2 Lattice Based Cryptography|Secure Hybrid Encryption In the Standard Model from Hard Learning Problems|格子|
|3.3 Cryptanalysis|An Algebraic Approach to the Rank Support Learning Problem|符号|

</div></details>


<details><summary>2020年</summary><div>

[プログラム](https://pqcrypto2020.inria.fr/program/)

|セッション|タイトル|分野|
|-------|-----|----|
|1.2 - Isogeny-based and Number Theoretic-based Cryptography|CSIDH on the surface|同種|
|1.2 - Isogeny-based and Number Theoretic-based Cryptography|Sashimi: Cutting up CSI-FiSh secret keys to produce an actively secure distributed signing protocol|同種|
|1.2 - Isogeny-based and Number Theoretic-based Cryptography|The supersingular isogeny problem in genus 2 and beyond|同種|
|1.2 - Isogeny-based and Number Theoretic-based Cryptography|LegRoast: Efficient post-quantum signatures from the Legendre PRF|同種|
|1.3 - Multivariate Cryptography|Multivariate Encryption Schemes Based on Polynomial Equations over Real Numbers|多変数|
|1.3 - Multivariate Cryptography|A Structural Attack on Block-Anti-Circulant UOV at SAC 2019|多変数|
|1.3 - Multivariate Cryptography|Combinatorial Rank Attacks Against the Rectangular Simple Matrix Encryption Scheme|多変数|
|1.3 - Multivariate Cryptography|Practical Cryptanalysis of k-ary C*|多変数|
|1.3 - Multivariate Cryptography|A Rank Attack Against Extension Field Cancellation|多変数|
|1.3 - Multivariate Cryptography|Generalization of Isomorphism of Polynomials with Two Secrets and Its Application to Public Key Encryption|多変数|
|2.2 - Quantum Algorithms|On quantum distinguishers for Type-3 Generalized Feistel network based on separability|共通鍵|
|2.3 - Implementation|Efficient Key Generation for Rainbow|多変数|
|3.2 - Lattice-based Cryptography|COSAC: COmpact and Scalable Arbitrary-Centered Discrete Gaussian Sampling over Integers|格子|
|3.2 - Lattice-based Cryptography|Short Zero-Knowledge Proof of Knowledge for Lattice-Based Commitment|格子|
|3.2 - Lattice-based Cryptography|Compact Privacy Protocols from Post-Quantum and Timed Classical Assumptions|格子|
|3.2 - Lattice-based Cryptography|Defeating «NewHope» with a Single Trace|格子|
|3.2 - Lattice-based Cryptography|Decryption failure is more likely after success|格子|
|3.2 - Lattice-based Cryptography|Efficient Post-Quantum SNARKs for RSIS and RLWE and their Applications to Privacy|格子|
|3.3 - Code-based Cryptography|QC-MDPC decoders with several shades of gray|符号|
|3.3 - Code-based Cryptography|About Low DFR for QC-MDPC Decoding|符号|
|3.3 - Code-based Cryptography|Randomized Decoding of Gabidulin Codes Beyond the Unique Decoding Radius|符号|

</div></details>


<details><summary>2019年</summary><div>

[プログラム](https://pqcrypto2019.org/schedules.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Lattice-based Cryptography|Finding closest lattice vectors using approximate Voronoi cells|格子|
|Lattice-based Cryptography|Evaluating the Potential for Hardware Acceleration of Four NTRU-Based Key Encapsulation Mechanisms Using Software/Hardware Codesign|格子|
|Lattice-based Cryptography|Forward-Secure Group Signatures from Lattices|格子|
|Lattice-based Cryptography|Towards Practical Microcontroller Implementation of the Signature Scheme Falcon|格子|
|Learning with Errors|Round5: A Compact and Fast Post-Quantum Public-Key Cryptosystem|格子|
|Learning with Errors|The impact of error dependencies on Ring/Mod-LWE/LWR based schemes|格子|
|Learning with Errors|Direct CCA2 KEM and Deterministic PKE from Standard LWE|格子|
|Cryptanalysis|Cryptanalysis of an NTRU-based Proxy Encryption Scheme from ASIACCS’15|格子|
|Isogeny-based Cryptography|Faster SeaSign signatures through improved rejection sampling|同種|
|Isogeny-based Cryptography|Genus Two Isogeny Cryptography|同種|
|Isogeny-based Cryptography|On Lions and Elligators: An efficient constant-time implementation of CSIDH|同種|
|Hash functions|Quantum security of hash functions and property-preservation of iterated hashing|その他|
|Hash functions|Improved Quantum Multicollision-Finding Algorithm|その他|
|Code-based Cryptography|Preventing timing attacks against RQC using constant time decoding of Gabidulin codes|符号|
|Code-based Cryptography|A traceable ring signature scheme based on coding theory|符号|
|Code-based Cryptography|On the Decoding Failure Rate of QC-MDPC Bit-Flipping Decoders|符号|

</div></details>


<details><summary>2018年</summary><div>

[プログラム](http://www.math.fau.edu/pqcrypto2018/daily-schedules.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Code-based Cryptography|LEDAkem: a post-quantum key encapsulation mechanism based on QC-LDPC codes|符号|
|Code-based Cryptography|Decoding Linear Codes with High Error Rate and its Impact for LPN Security|符号|
|Code-based Cryptography|QC-MDPC: A Timing Attack and a CCA2 KEM|符号|
|Code-based Cryptography|FPGA-based Niederreiter Cryptosystem using Binary Goppa Codes|符号|
|Cryptanalysis|Implementing Joux-Vitse’s Crossbred Algorithm for Solving MQ Systems over F_2 on GPUs|多変数|
|Isogenies in Cryptography|Computing Isogenies between Montgomery Curves Using the Action of (0; 0)|同種|
|Isogenies in Cryptography|Faster isogeny-based compressed key agreement|同種|
|Protocols|G-Merkle: A Hash-Based Group Signature Scheme from Standard Assumptions|その他|
|Lattice-based Cryptography|Practical Implementation of Ring-SIS/LWE based Signature and IBE|格子|
|Lattice-based Cryptography|Progressive lattice sieving|格子|
|Lattice-based Cryptography|A Nonstandard  Variant of Learning with Rounding with Polynomial Modulus and Unbounded Samples|格子|
|Lattice-based Cryptography|Lattice-based Signcryption without Random Oracles|格子|
|Multivariate Cryptography|Rank Analysis of Cubic  Multivariate Cryptosystems|多変数|
|Multivariate Cryptography|Improved Cryptanalysis of HFEv- via Projection|多変数|
|Multivariate Cryptography|HFERP – A New Multivariate Encryption Scheme|多変数|
|Hash-based Cryptography|Grafting trees: a Fault Attack against the SPHICS framework|その他|
|Hash-based Cryptography|Post-quantum security of the sponge construction|その他|
|Hash-based Cryptography|Putting wings on SPHINCS|その他|

</div></details>


<details><summary>2017年</summary><div>

[プログラム](https://2017.pqcrypto.org/conference/schedule.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Code-based crypto I|A new rank metric codes based encryption scheme|符号|
|Code-based crypto I|Ouroboros: a simple, secure and efficient key exchange protocol based on coding theory|符号|
|Code-based crypto I|CCA2 Key-Privacy for Code-Based Encryption in the Standard Model|符号|
|Isogeny-based crypto|Loop-abort faults on supersingular isogeny cryptosystems|同種|
|Isogeny-based crypto|Fault attack on Supersingular Isogeny Cryptosystems|同種|
|Recent results session|Putting Wings on SPHINCS|その他|
|Recent results session|Hash-Based Signatures in Practice|その他|
|Recent results session|High-Speed Hardware for NTRUEncrypt-SVES: Lessons Learned|格子|
|Recent results session|pqNTRUSign: an Update|格子|
|Recent results session|A New Signature Scheme Based on (U|U + V) Codes|符号|
|Recent results session|CAKE: Code-Based Key Exchange from QC-MDPC Codes|符号|
|Recent results session|New Variant of the UOV Scheme with Smaller Public Keys|多変数|
|Recent results session|Solving Polynomial Systems and an Invariant from Commutative Algebra|多変数|
|Lattice-based crypto I|Fast Lattice-Based Encryption: Stretching SPRING|格子|
|Lattice-based crypto I|Revisiting TESLA in the quantum random oracle model|格子|
|Code-based crypto II|A Reaction Attack on the QC-LDPC McEliece Cryptosystem|符号|
|Code-based crypto II|Quantum Information Set Decoding Algorithms|符号|
|Multivariate crypto I|MHFEv - An Efficient Multivariate Signature Scheme|多変数|
|Multivariate crypto I|MQ Signatures for PKI|多変数|
|Multivariate crypto I|An Updated Security Analysis of PFLASH|多変数|
|Lattice-based crypto II|Cryptanalysis of RLWE-Based One-Pass Authenticated Key Exchange|格子|
|Lattice-based crypto II|A Hybrid Lattice Basis Reduction and Quantum Search Attack on LWE|格子|
|Multivariate crypto II|Improved Attacks for Characteristic-2 Parameters of the Cubic ABC Simple Matrix Encryption Scheme|多変数|
|Multivariate crypto II|Key Recovery Attack for All Parameters of HFE|多変数|
|Multivariate crypto II|Practical Key Recovery Attack for ZHFE|多変数|

</div></details>


# Eurocrypt
ここから３つはIACRが誇る世界で最も権威のある暗号の国際会議です．今年はコロナの関係で10月にやっていましたが，毎年５月ぐらいにやっている印象です．

| 方式 |2022年 |2021年 | 2020年 | 2019年 | 2018年  | 2017年 |
|:---:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|
|格子  | 7  | 10  | 7  | 4  | 4  | 11  |
|符号  | 3  |  0 |  2 |  0 |  0 |  0 |
|多変数| 0  |  3 |  0 |  0 |  0 |  0 |
|同種  | 3  |  4 |  3 |  1 |  1 |  0 |
|共通鍵| 2  |  0  |  1 |  0 | 0  | 1  |
|その他| 1  |  1 |  0 |  0 |  0 |  0 |
|不明  | 1  |  1 |  2 |  0 |  2 |  0 |

<details><summary>2022年</summary><div>

[プログラム](https://eurocrypt.iacr.org/2022/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Homomorphic encryption 1|Sine Series Approximation of the Mod Function for Bootstrapping of Approximate HE|格子|
|Homomorphic encryption 1|High-Precision Bootstrapping for Approximate Homomorphic Encryption by Error Variance Minimization|格子|
|Post-quantum cryptography 1|Beyond quadratic speedups in quantum attacks on symmetric schemes|共通鍵|
|Post-quantum cryptography 1|Post-Quantum Security of the Even-Mansour Cipher|共通鍵|
|Post-quantum cryptography 1|Non-malleable Commitments Against Quantum Attacks|その他|
|Post-quantum cryptography 2|On the Lattice Isomorphism Problem, Quadratic Forms, Remarkable Lattices, and Cryptography|格子|
|Post-quantum cryptography 2|Quantum Algorithms for Variants of Average-Case Lattice Problems via Filtering|格子|
|Post-quantum cryptography 2|Orientations and the supersingular endomorphism ring problem|同種|
|Post-quantum cryptography 3|Watermarking PRFs against Quantum Adversaries|格子|
|Post-quantum cryptography 3|Practical Post-Quantum Signature Schemes from Isomorphism Problems of Trilinear Forms|同種|
|Post-quantum cryptography 3|Anonymous, Robust Post-Quantum Public Key Encryption|格子・符号|
|Post-quantum cryptography 4|Anonymity of NIST PQC Round 3 KEMs|格子・符号・同種|
|Post-quantum cryptography 4|On IND-qCCA security in the ROM and its applications: CPA security is sufficient for TLS 1.3|不明|
|Post-quantum cryptography 4|McEliece needs a Break -- Solving McEliece-1284 and Quasi-Cyclic-2918 with Modern ISD|符号|

</div></details>


<details><summary>2021年</summary><div>

[プログラム](https://eurocrypt.iacr.org/2021/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Public Key Cryptography and Isogenies|Decentralized Multi-Authority ABE for DNFs from LWE|格子|
|Public Key Cryptography and Isogenies|Compact, Efficient and UC-Secure Isogeny-Based Oblivious Transfer|同種|
|Public Key Cryptography and Isogenies|One-way functions and malleability oracles: Hidden shift attacks on isogeny-based protocols|同種|
|Symmetric Cryptanalysis|Candidate Obfuscation via Oblivious LWE Sampling|格子|
|FHE and IO|Advanced Lattice Sieving on GPUs, with Tensor Cores|格子|
|Isogenies and Lattices|Sieving for twin smooth integers with solutions to the Prouhet-Tarry-Escott problem|同種|
|Isogenies and Lattices|Delay Encryption|同種|
|Isogenies and Lattices|A 2^{n/2}-Time Algorithm for \sqrt{n}-SVP and \sqrt{n}-Hermite SVP, and an Improved Time-Approximation Tradeoff for (H)SVP|格子|
|Isogenies and Lattices|New Lattice Two-Stage Sampling Technique and its Applications to Functional Encryption – Stronger Security and Smaller Ciphertexts|格子|
|Isogenies and Lattices|On Bounded Distance Decoding with Predicate: Breaking the "Lattice Barrier" for the Hidden Number Problem|格子|
|Isogenies and Lattices|On the ideal shortest vector problem over random rational primes|格子|
|Multiparty Computation|Multi-Party Reusable Non-Interactive Secure Computation from LWE|格子|
|Multiparty Computation|Unbounded Multi-Party Computation from Learning with Errors|格子|
|Quantum Constructions and Proofs|On the Compressed-Oracle Technique, and Post-Quantum Security of Proofs of Sequential Work|不明|
|Post-Quantum Cryptography|The Nested Subset Differential Attack: A Practical Direct Attack Against LUOV which Forges a Signature within 210 Minutes|多変数|
|Post-Quantum Cryptography|Improved cryptanalysis of UOV and Rainbow|多変数|
|Post-Quantum Cryptography|Cryptanalytic Applications of the Polynomial Method for Solving Multivariate Equation Systems over GF(2)|多変数|
|Post-Quantum Cryptography|Round-Optimal Blind Signatures in the Plain Model from Classical and Quantum Standard Assumptions|その他|
|Post-Quantum Cryptography|Post-Quantum Multi-Party Computation|格子|

</div></details>


<details><summary>2020年</summary><div>

[プログラム](https://eurocrypt.iacr.org/2020/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Opening Remarks + Number-Theoretic Cryptography|He Gives C-Sieves on the CSIDH|同種|
|Opening Remarks + Number-Theoretic Cryptography|Quantum Security Analysis of CSIDH|同種|
|Opening Remarks + Number-Theoretic Cryptography|Rational Isogenies from Irrational Endomorphisms|同種|
|Best Paper Award | Optimal Broadcast Encryption from Pairings and LWE|格子|
|Obfuscation, Functional Encryption, and Attribute-Based Encryption|Impossibility Results for Lattice-Based Functional Encryption Schemes|格子|
|Quantum Cryptanalysis|Implementing Grover oracles for quantum key search on AES and LowMC|共通鍵|
|Succinct and Concretely Efficient Proof Systems|Fractal: Post-Quantum and Transparent Recursive Proofs from Holography|不明|
|Lattice-Based and Code-Based Cryptography|Hardness of LWE on General Entropic Distributions|格子|
|Lattice-Based and Code-Based Cryptography|Integral Matrix Gram Root and Lattice Gaussian Sampling without Floats|格子|
|Lattice-Based and Code-Based Cryptography|(One) Failure is Not an Option: Bootstrapping the Search for Failures in Lattice-Based Encryption Schemes|格子|
|Lattice-Based and Code-Based Cryptography|Key Recovery from Gram--Schmidt Norm Leakage in Hash-and-Sign Signatures over NTRU Lattices|格子|
|Lattice-Based and Code-Based Cryptography|An Algebraic Attack on Rank Metric Code-Based Cryptosystems|符号|
|Lattice-Based and Code-Based Cryptography|Key-Homomorphic Pseudorandom Functions from LWE with Small Modulus|格子|
|Lattice-Based and Code-Based Cryptography|Blackbox Secret Sharing Revisited: A Coding-Theoretic Approach with Application to Expansionless Near-Threshold Schemes|符号|
|Public-Key Encryption and Generic Models|Separate Your Domains: NIST PQC KEMs, Oracle Cloning and Read-Only Indifferentiability|不明|

</div></details>


<details><summary>2019年</summary><div>

[プログラム](https://eurocrypt.iacr.org/2019/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Quantum I|Quantum Circuits for the CSIDH: Optimizing Quantum Evaluation of Isogenies|同種|
|Lattice-Based Cryptography|Building an Efficient Lattice Gadget Toolkit: Subgaussian Sampling and More|格子|
|Lattice-Based Cryptography|Approx-SVP in Ideal Lattices with Pre-processing|格子|
|Lattice-Based Cryptography|The General Sieve Kernel and New Records in Lattice Reduction|格子|
|Lattice-Based Cryptography|Misuse Attacks on Post-Quantum Cryptosystems|格子|

</div></details>


<details><summary>2018年</summary><div>

[プログラム](https://eurocrypt.iacr.org/2018/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Lattices|Shortest Vector from Lattice Sieving: a Few Dimensions for Free|格子|
|Lattices|On the Ring-LWE and Polynomial-LWE problems |格子|
|Lattices|Faster Gaussian Sampling for Trapdoor Lattices with Arbitrary Modulus |格子|
|Lattices|Short, Invertible Elements in Partially Splitting Cyclotomic Rings and Applications to Lattice-Based Zero-Knowledge Proofs |格子|
|Isogeny|Supersingular Isogeny Graphs and Endomorphism Rings: Reductions and Solutions|同種|
|Quantum|Tightly-Secure Key-Encapsulation Mechanism in the Quantum Random Oracle Model|不明|
|Quantum| A Concrete Treatment of Fiat-Shamir Signatures in the Quantum Random-Oracle Model|不明|

</div></details>


<details><summary>2017年</summary><div>

[プログラム](https://eurocrypt.iacr.org/2017/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Lattice attacks and constructions 1|Revisiting Lattice Attacks on overstretched NTRU parameters|格子|
|Lattice attacks and constructions 1|Short Generators Without Quantum Computers: The Case of Multiquadratics|格子|
|Lattice attacks and constructions 1|Computing generator in cyclotomic integer rings|格子|
|Lattice attacks and constructions 2|One-Shot Verifiable Encryption from Lattices|格子|
|Lattice attacks and constructions 2|Short Stickelberger Class Relations and application to Ideal-SVP|格子|
|Lattice attacks and constructions 3|Private Puncturable PRFs From Standard Lattice Assumptions|格子|
|Lattice attacks and constructions 3|Constraint-hiding constrained PRFs for NC1 from LWE|格子|
|Lattice attacks and constructions 4|Random Sampling Revisited: Lattice Enumeration with Discrete Pruning|格子|
|Lattice attacks and constructions 4|On dual lattice attacks against small-secret LWE and parameter choices in HElib and SEAL|格子|
|Lattice attacks and constructions 4|Small CRT-Exponent RSA Revisited|格子|
|Symmetric-key constructions|Quantum-Secure Symmetric-Key Cryptography Based on Hidden Shifts|共通鍵|
|Obfuscation 2|Lattice-Based SNARGs and Their Application to More Efficient Obfuscation|格子|

</div></details>


# Crypto
これだけスペリングの最後に「o」が入るの紛らわしい・・・()
毎年８月にやっています．

| 方式 |2022年 |2021年 | 2020年 | 2019年 | 2018年  | 2017年 |
|:---:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|
|格子  | 12  | 12  | 10  |  5 |  6 | 6  |
|符号  | 5  |  3 |  1 |  0 |  0 |  1 |
|多変数| 3  |  0 |  0 |  0 |  0 |  0 |
|同種  | 0  |  2 |  0 |  1 |  0 |  0 |
|共通鍵| 1  |  0  | 0  | 0  |  0 |  0 |
|その他| 1  |  0 |  0 |  0 |  0 |  0 |
|不明  | 2  |  0 |  3 | 0  |  1 |  0 |

<details><summary>2022年</summary><div>

[プログラム](https://crypto.iacr.org/2022/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Advanced Encryption Systems|Candidate Witness Encryption from Lattice Techniques|格子|
|Advanced Encryption Systems|Formal Verification of Saber’s Public-Key Encryption Scheme in EasyCrypt|格子|
|Lattice-based Zero Knowledge|Lattice-Based Zero-Knowledge Proofs and Applications: Shorter, Simpler, and More General|格子|
|Lattice-based Zero Knowledge|Lattice-Based SNARKs: Publicly Verifiable, Preprocessing, and Recursively Composable|格子|
|Lattice-based Zero Knowledge|Practical Sublinear Proofs for R1CS from Lattices|格子|
|Lattice-Based Signatures|Shorter Hash-and-Sign Lattice-Based Signatures|格子|
|Lattice-Based Signatures|MuSig-L: Lattice-Based Multi-Signature With Single-Round Online Phase|格子|
|Lattice-Based Signatures|A New Framework For More Efficient Round-Optimal Lattice-Based (Partially) Blind Signature via Trapdoor Sampling|格子|
|Best Paper Awards|Breaking Rainbow Takes a Weekend on a Laptop|多変数|
|Best Paper Awards|Some Easy Instances of Ideal-SVP and Implications to the Partial Vandermonde Knapsack Problem|格子|
|Coding Theory|On Codes and Learning with Errors over Function Fields|格子・符号|
|Coding Theory|Syndrome Decoding in the Head: Shorter Signatures from Zero-Knowledge Proofs|符号|
|Coding Theory|Beyond the Csiszár-Korner Bound: Best-Possible Wiretap Coding via Obfuscation|符号|
|Coding Theory|Correlated Pseudorandomness from Expand-Accumulate Codes|符号|
|Cryptanalysis II|Partial Key Exposure Attacks on BIKE, Rainbow and NTRU|格子・符号・多変数|
|Cryptanalysis II|Improving Support-Minors rank attacks: applications to GeMSS and Rainbow|多変数|
|Post-quantum Cryptography|Post-Quantum Simulatable Extraction with Minimal Assumptions: Black-Box and Constant-Round|不明|
|Post-quantum Cryptography|1. The Gap Is Sensitive to Size of Preimages: Collapsing Property Doesn't Go Beyond Quantum Collision-Resistance for Preimages Bounded Hash Functions, and 2. New Constructions of Collapsing Hashes|その他|
|Post-quantum Cryptography|Statistically Sender-Private OT From LPN and Derandomization|格子|
|Post-quantum Cryptography|Constructive Post-Quantum Reductions|不明|
|Symmetric Cryptanalysis|Simon's Algorithm and Symmetric Crypto: Generalizations and Automatized Applications|共通鍵|

</div></details>

<details><summary>2021年</summary><div>

[プログラム](https://crypto.iacr.org/2021/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Signatures|Compact Ring Signatures from Learning With Errors|格子|
| Lattice Cryptography|Subtractive Sets over Cyclotomic Rings: Limits of Schnorr-like Arguments over Lattices|格子|
| Lattice Cryptography|A Compressed Sigma-Protocol Theory for Lattices|格子|
| Lattice Cryptography|A New Simple Technique to Bootstrap Various Lattice Zero-Knowledge Proofs to QROM Secure NIZKs|格子|
| Lattice Cryptography|SMILE: Set Membership from Ideal Lattices with Applications to Ring Signatures and Confidential Transactions|格子|
| Lattice Cryptography|Deniable Fully Homomorphic Encryption from Learning With Errors|格子|
|Lattice Cryptanalysis|Counterexamples to New Circular Security Assumptions Underlying iO|格子|
|Lattice Cryptanalysis|How to Meet Ternary LWE Keys|格子|
|Lattice Cryptanalysis|Lattice Reduction with Approximate Enumeration Oracles: Practical Algorithms and Concrete Performance|格子|
|Lattice Cryptanalysis|Towards faster polynomial-time lattice reduction|格子|
|Lattice Cryptanalysis|Lower bounds on lattice sieving and information set decoding|格子|
|Cryptanalysis| The Cost to Break SIKE: A Comparative Hardware-Based Analysis with AES and SHA-3|同種|
|Cryptanalysis|Improved torsion-point attacks on SIDH variants|同種|
|Codes and Extractors|Smoothing Out Binary Linear Codes and Worst-case Sub-exponential Hardness for LPN|符号|
|Codes and Extractors|Silver: Silent VOLE and Oblivious Transfer from Hardness of Decoding Structured LDPC Codes|符号|
|Codes and Extractors|Non-Malleable Codes for Bounded Parallel-Time Tampering|符号|
|Encryption++|Functional Encryption for Turing Machines with Dynamic Bounded Collusion from LWE|格子|

</div></details>


<details><summary>2020年</summary><div>

[プログラム](https://crypto.iacr.org/2020/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Post Quantum Crypto 1|Practical Product Proofs for Lattice Commitments|格子|
|Post Quantum Crypto 1|Lattice-Based Blind Signatures, Revisited|格子|
|Post Quantum Crypto 1|LWE with Side Information: Attacks and Concrete Security Estimation|格子|
|Post Quantum Crypto 1|A key-recovery timing attack on post-quantum primitives using the Fujisaki-Okamoto transformation and its application on FrodoKEM|格子|
|Cryptanalysis 1|Cryptanalysis of LEDAcrypt|符号|
|Lattices and Related Problems|Faster Enumeration-based Lattice Reduction: Root Hermite Factor k^(1/(2k)) in Time k^(k/8 + o(k))|格子|
|Lattices and Related Problems|Random Self-reducibility of Ideal-SVP via Arakelov Random Walks|格子|
|Lattices and Related Problems|Lattice Reduction for Modules, or How to Reduce ModuleSVP to ModuleSVP|格子|
|Lattices and Related Problems|Slide Reduction, Revisited—Filling the Gaps in SVP Approximation|格子|
|Lattices and Related Problems|Fast reduction of algebraic lattices over cyclotomic fields|格子|
|Post Quantum Crypto 2|Scalable Pseudorandom QuantumStates|不明|
|Post Quantum Crypto 2|Efficient Pseudorandom Correlation Generators from Ring-LPN|格子|
|Post Quantum Crypto 2|A non-PCP Approach to Succinct Quantum-Safe Zero-Knowledge|不明|
|Post Quantum Crypto 2|Non-Interactive Zero-Knowledge Arguments for QMA, with preprocessing|不明|

</div></details>


<details><summary>2019年</summary><div>

[プログラム](https://crypto.iacr.org/2019/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Lattice-Based ZK|Noninteractive Zero Knowledge for NP from (Plain) Learning With Errors|格子|
|Lattice-Based ZK|Lattice-based Zero-Knowledge Proofs: New Techniques for Shorter and Faster Constructions and Applications|格子|
|Lattice-Based ZK|Joint presentation with next talk: Efficient Lattice-Based Zero-Knowledge Arguments with Standard Soundness: Construction and Applications|格子|
|Lattice-Based ZK|Algebraic Techniques for Short(er) Exact Lattice-Based Zero-Knowledge Proofs|格子|
|Best Young Researcher Papers|Quantum cryptanalysis in the RAM model: Claw-finding attacks on SIKE|同種|
|Best Young Researcher Papers|Fully Secure Attribute-Based Encryption for t-CNF from LWE|格子|

</div></details>


<details><summary>2018年</summary><div>

[プログラム](https://crypto.iacr.org/2018/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Lattices|GGH15 Beyond Permutation Branching Programs: Proofs, Attacks, and Candidates|格子|
|Lattices|Lower Bounds on Lattice Enumeration with Extreme Pruning|格子|
|Lattices|Dissection-BKW|格子|
|Lattice-based Zero Knowledge|Sub-Linear Lattice-Based Zero-Knowledge Arguments for Arithmetic Circuits|格子|
|Lattice-based Zero Knowledge|Lattice-Based Zero-Knowledge Arguments for Integer Relations|格子|
|Lattice-based Zero Knowledge|Multi-Theorem Preprocessing NIZKs from Lattices|格子|
|Zero Knowledge|From Laconic Zero-Knowledge to Public-Key Cryptography|不明|

</div></details>


<details><summary>2017年</summary><div>

[プログラム](https://www.iacr.org/conferences/crypto2017/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Lattices|Gaussian Sampling over the Integers: Efficient, Generic, Constant-Time|格子|
|Lattices|LPN Decoded|格子|
|Award Papers|Watermarking Cryptographic Functionalities from Standard Lattice Assumptions|格子|
|Public-Key Encryption|Identity-based Encryption from Codes with Rank Metric|符号|
|Lattice Crypto|Middle-Product Learning With Errors|格子|
|Lattice Crypto|Soft merge between (1) All-But-Many Lossy Trapdoor Functions and Selective Opening Chosen-Ciphertext Security from LWE and (2) All-But-Many Lossy Trapdoor Functions from Lattices and Applications|格子|
|Lattice Crypto|Amortization with Fewer Equations for Proving Knowledge of Small Secrets|格子|

</div></details>


# Asiacrypt
毎年12月にやっています
今年のAsiacryptで下記の発表を行なったのは本当に最近の話です

| 方式 |2022年 |2021年 | 2020年 | 2019年 | 2018年  | 2017年 |
|:---:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|:--------------:|
|格子  | 11  | 9  |  7 |  6 | 6  |  5 |
|符号  | 1  |  0 |  2 |  0 |  1 |  0 |
|多変数| 0  |  1 |  0 |  0 | 0  |  1 |
|同種  | 4  |  2 |  7 |  6 |  3 |  1 |
|共通鍵| 0  |  3  | 0  |  0 |  0 | 1  |
|その他| 1  |  0 |  0 |  0 |  0 |  0 |
|不明  | 0  | 2  |  2 |  0 |  2 |  1 |

<details><summary>2022年</summary><div>

[プログラム](https://asiacrypt.iacr.org/2022/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Multiparty Computation 1|Non-Interactive Secure Computation of Inner-Product from LPN and LWE|格子|
|Isogeny Based Cryptography|A New Isogeny Representation and Applications to Cryptography|同種|
|Isogeny Based Cryptography|Group Action Key Encapsulation and Non-Interactive Key Exchange in the QROM|同種|
|Isogeny Based Cryptography|Horizontal racewalking using radical isogenies|同種|
|Homomorphic Encryption|Large-Precision Homomorphic Sign Evaluation using FHEW/TFHE Bootstrapping|格子|
|Homomorphic Encryption|EvalRound Algorithm in CKKS Bootstrapping|格子|
|Homomorphic Encryption|FINAL: Faster FHE instantiated with NTRU and LWE|格子|
|Proofs and SNARKs|SIDH Proof of Knowledge|同種|
|Non Interactive Zero Knowledge|Efficient NIZKs from LWE via Polynomial Reconstruction and ``MPC in the Head''|格子|
|Advanced Encryption 1|Witness Encryption and Null-IO from Evasive LWE|格子|
|Lattice Algorithms and Cryptanalysis|Log-$\mathcal{S}$-unit lattices using Explicit Stickelberger Generators to solve Approx Ideal-SVP|格子|
|Lattice Algorithms and Cryptanalysis|On Module Unique-SVP and NTRU|格子|
|Lattice Algorithms and Cryptanalysis|A Non-heuristic Approach to Time-space Tradeoffs and Optimizations for BKW|格子|
|Lattice Algorithms and Cryptanalysis|Improving Bounds on Elliptic Curve Hidden Number Problem for ECDH Key Exchange|格子|
|Signatures|Recovering the tight security proof of SPHINCS+|その他|
|Signatures|BLOOM: Bimodal Lattice One-Out-of-Many Proofs and Applications|格子|
|Cryptanalysis|Statistical Decoding 2.0: Reducing Decoding to LPN|符号|

</div></details>


<details><summary>2021年</summary><div>

[プログラム](https://asiacrypt.iacr.org/2021/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Award Papers|On the hardness of the NTRU problem|格子|
|Award Papers|Lattice Enumeration for Tower NFS: a 521-bit Discrete Logarithm Computation|格子|
|Post-Quantum Cryptography|Gladius: LWR based efficient hybrid public key encryption with distributed decryption|格子|
|Post-Quantum Cryptography|Lattice-Based Group Encryption with Full Dynamicity and Message Filtering Policy|格子|
|Post-Quantum Cryptography|A New Variant of Unbalanced Oil and Vinegar Using Quotient Ring: QR-UOV|多変数|
|Post-Quantum Cryptography|Shorter Lattice-Based Group Signatures via ``Almost Free'' Encryption and Other Optimizations|格子|
|Post-Quantum Cryptography|Séta: Supersingular Encryption from Torsion Attacks|同種|
|Post-Quantum Cryptography|SHealS and HealS: isogeny-based PKEs from a key validation method for SIDH|同種|
|Physical Attacks, Leakage and Countermeasures|Fault-Injection Attacks against NIST’s Post-Quantum Cryptography Round 3 KEM Candidates|不明|
|Quantum Security| Redeeming Reset Indifferentiability and Applications to Post-Quantum Security|不明|
|Symmetric Cryptanalysis (I)|Automatic Classical and Quantum Rebound Attacks on AES-like Hashing by Exploiting Related-key Differentials|共通鍵|
|Symmetric Cryptanalysis (I)|Clustering Effect in Simon and Simeck|共通鍵|
|Symmetric Cryptanalysis (II)|Quantum Linearization Attacks|共通鍵|
|Lattice Cryptanalysis|NTRU Fatigue: How Stretched is Overstretched?|格子|
|Lattice Cryptanalysis|Faster Dual Lattice Attacks for Solving LWE -- with applications to CRYSTALS|格子|
|Lattice Cryptanalysis|Lattice sieving via quantum random walks|格子|
|Lattice Cryptanalysis|A Systematic Approach and Analysis of Key Mismatch Attacks on Lattice-Based NIST Candidate KEMs|格子|

</div></details>


<details><summary>2020年</summary><div>

[プログラム](https://asiacrypt.iacr.org/2020/program.php)

|セッション|タイトル|分野|
|-------|-----|----|
|Best Paper award|SQISign: Compact Post-Quantum signatures from Quaternions and Isogenies|同種|
|Encryption Schemes|Simulation-Sound Arguments for LWE and Applications to KDM-CCA2 Security|格子|
|Post-quantum Cryptography|Scalable Ciphertext Compression Techniques for Post-Quantum KEMs and their Applications|不明|
|Post-quantum Cryptography|Post-Quantum Verification of Fujisaki-Okamoto|不明|
|Post-quantum Cryptography|A New Decryption Failure Attack against HQC|符号|
|Cryptanalysis|Improvements of Algebraic Attacks for solving the Rank Decoding and MinRank problems|符号|
|Lattice-Based Cryptography|Practical Exact Proofs from Lattices: New Techniques to Exploit Fully-Splitting Rings|格子|
|Lattice-Based Cryptography|Towards Classical Hardness of Module-LWE: The Linear Rank Case|格子|
|Lattice-Based Cryptography|Lattice-Based E-Cash, Revisited|格子|
|Lattice-Based Cryptography|Twisted-PHS: Using the Product Formula to Solve Approx-SVP in Ideal Lattices|格子|
|Lattice-Based Cryptography|Simpler Statistically Sender Private Oblivious Transfer from Ideals of Cyclotomic Integers|格子|
|Quantum Algorithms|Estimating quantum speedups for lattice sieves|格子|
|Isogeny-based Cryptography|Cryptographic Group Actions and Applications|同種|
|Isogeny-based Cryptography|B-SIDH: supersingular isogeny Diffie-Hellman using twisted torsion|同種|
|Isogeny-based Cryptography|Calamari and Falafl: Logarithmic (Linkable) Ring Signatures from Isogenies and Lattices|同種|
|Isogeny-based Cryptography|Radical Isogenies|同種|
|Isogeny-based Cryptography|Oblivious Pseudorandom Functions from Isogenies|同種|
|Isogeny-based Cryptography|SiGamal: A supersingular isogeny-based PKE and its application to a PRF|同種|

</div></details>


<details><summary>2019年</summary><div>

[プログラム](https://asiacrypt.iacr.org/2019/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Lattices (1)|Middle-Product Learning with Rounding Problem and its Applications|格子|
|Lattices (1)|A Novel CCA Attack using Decryption Errors against LAC|格子|
|Lattices (1)|Towards Attribute-Based Encryption for RAMs from LWE: Sub-linear Decryption, and More|格子|
|Isogenies (1)|CSI-FiSh: Efficient Isogeny based Signatures through Class Group Computations|同種|
|Isogenies (1)|Verifiable Delay Functions from Supersingular Isogenies and Pairings|同種|
|Isogenies (1)|Strongly Secure Authenticated Key Exchange from Supersingular Isogenies|同種|
|Lattices (2)|An LLL Algorithm for Module Lattices|格子|
|Lattices (2)|Order-LWE and the Hardness of Ring-LWE with Entropic Secrets|格子|
|Lattices (2)|On the Non-Existence of Short Vectors in Random Module Lattices|格子|
|Isogenies (2)|Dual Isogenies and Their Application to Public-key Compression for Isogeny-based Cryptography|同種|
|Isogenies (2)|Optimized Method for Computing Odd-Degree Isogenies on Edwards Curves|同種|
|Isogenies (2)|Hard Isogeny Problems over RSA Moduli and Groups with Infeasible Inversion|同種|

</div></details>


<details><summary>2018年</summary><div>

[プログラム](https://asiacrypt.iacr.org/2018/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Post-Quantum Cryptanalysis|Practical attacks against the Walnut digital signature scheme|不明|
|Post-Quantum Cryptanalysis|Two attacks on rank metric code-based schemes: RankSign and an IBE scheme|符号|
|Post-Quantum Cryptanalysis|An efficient structural attack on NIST submission DAGS|不明|
|Lattice Crypto I|Measuring, simulating and exploiting the head concavity phenomenon in BKZ|格子|
|Lattice Crypto I|Quantum Lattice Enumeration and Tweaking Discrete Pruning|格子|
|Lattice Crypto I|On the Hardness of the Computational Ring-LWR Problem and its Applications|格子|
|Lattice Crypto II|On the Statistical Leak of the GGH13 Multilinear Map and some Variants|格子|
|Lattice Crypto II|LWE Without Modular Reduction and Improved Side-Channel Attacks Against BLISS|格子|
|Isogeny Crypto|Towards practical key exchange from ordinary isogeny graphs|同種|
|Isogeny Crypto|CSIDH: An Efficient Post-Quantum Commutative Group Action|同種|
|Isogeny Crypto|Computing supersingular isogenies on Kummer surfaces|同種|
|Foundations|Simple and More Efficient PRFs with Tight Security from LWE and Matrix-DDH|格子|

</div></details>


<details><summary>2017年</summary><div>

[プログラム](https://asiacrypt.iacr.org/2018/program.html)

|セッション|タイトル|分野|
|-------|-----|----|
|Post-Quantum Cryptography|An Existential Unforgeable Signature Scheme based on Multivariate Quadratic Equations|多変数|
|Post-Quantum Cryptography|Post-Quantum Security of Fiat-Shamir|不明|
|Lattices|Large Modulus Ring-LWE >= Module-LWE|格子|
|Lattices|Revisiting the Expected Cost of Solving uSVP and Applications to LWE|格子|
|Lattices|Coded-BKW with Sieving|格子|
|Lattices|Sharper Bounds in Lattice-Based Cryptography using the Rényi Divergence|格子|
|Quantum Algorithms|An Efficient Quantum Collision Search Algorithm and Implications on Symmetric Cryptography|共通鍵|
|Elliptic Curves|A simple and compact algorithm for SIDH with arbitrary degree isogenies|同種|
|Cryptographic Protocols|Two-Round PAKE from Approximate SPH and Instantiations from Lattices|格子|

</div></details>


# 感想
格子
安定して発表件数が多い方式だなと思います
耐量子計算機暗号のセッション以外に，秘密計算・署名・プロトコルなどのセッションでよく見られました

符号
昨年と比べて発表件数が若干伸びましたね
このまま符号ベース暗号をやる人が増えたらなって思います

多変数
昨年はAsiaCrypt2021での [QR-UOV](https://eprint.iacr.org/2020/1243.pdf) とかSAC2021での [MAYO](https://eprint.iacr.org/2021/1144.pdf) など新しいプロトコルが提案された分，今年はその方式に対する発表が多かった気がします
現在NISTで署名方式を新しく募集しているため，今後も多くみられると思います

同種
来年は増えそうな予感がしています（SQISignとかどうなんですかね？）

共通鍵
日本だとあまり見られませんでしたが，世界的にはまだまだ主力なんだろうなと

その他
ハッシュだけじゃなくて，量子関連の話題が多かった気がします
次やるときは量子関連の話題で共通鍵の方とまとめようかなと思いました

# まとめ
2022年での耐量子計算機暗号に関する学会の発表件数を調査しました
~~１年分しかやらなくてよかったのでめちゃくちゃ楽でした~~

今年分しか調査していませんが，国内で見たら耐量子計算機の発表件数がそもそも増えた気がします

多変数のところでも書きましたが，NISTが新しく署名方式を募集している関係上，来年・再来年は署名方式に対する安全性とか高速化とかそこらへんの研究が増えそうな予感がなきにしも

来年もがんばりましょう！願わくば符号ベース暗号をやってほしいなと！！！

----------------------
今回の内容はここまでです．ここまでご覧になってくださった方々ありがとうございます！