A structural attack to the DME-(3,2,q) cryptosystem

Abstract We present a structural attack on the DME cryptosystem with parameters ( 3 , 2 , q ) . The attack recovers 10 of the 12 coefficients of the first linear map. We also show that, if those 12 coefficients were known, the rest of the private key can be efficiently obtained by solving systems of quadratic equations with just two variables.