A linear decomposition attack

Vitaliǐ Roman'kov, Alexei Myasnikov

We discuss a new attack, termed a dimension or linear decomposition attack, on several known group-based cryptosystems. This attack gives a polynomial time deterministic algorithm…