Cryptanalysis of a multivariate CCZ scheme

Alessio Caminata, Elisa Gorla, Madison Mabe +2

We consider the multivariate scheme Pesto, which was introduced by Calderini, Caminata, and Villa. In this scheme, the public polynomials are obtained by applying a CCZ transformat…