Chosen-ciphertext attack on noncommutative Polly Cracker

Stanislav Bulygin

We propose a chosen-ciphertext attack on recently presented noncommutative variant of the well-known Polly Cracker cryptosystem. We show that if one chooses parameters for this non…