Hidden Field Equations

Hidden Fields Equations (HFE) is a public key cryptosystem which was introduced at Eurocrypt in 1996 and proposed by (French) following the idea of the Matsumoto and Imai system. HFE is also known as HFE trapdoor function. It is based on polynomials over finite fields ${\displaystyle \mathbb {F} _{q}}$ of different size to disguise the relationship between the private key and public key. HFE is in fact a family which consists of basic HFE and combinatorial versions of HFE. The HFE family of cryptosystems is based on the hardness of the problem of finding solutions to a system of multivariate quadratic equations (the so-called MQ problem) since it uses private affine transformations to hide the extension field and the private polynomials. Hidden Field Equations also have been used to construct digital signature schemes, e.g. Quartz and Sflash.

One of the central notions to understand how Hidden Field Equations work is to see that for two extension fields ${\displaystyle \mathbb {F} _{q^{n}}}$ ${\displaystyle \mathbb {F} _{q^{m}}}$ over the same base field ${\displaystyle \mathbb {F} _{q}}$ one can interpret a system of ${\displaystyle m}$ multivariate polynomials in ${\displaystyle n}$ variables over ${\displaystyle \mathbb {F} _{q}}$ as a function ${\displaystyle \mathbb {F} _{q^{n}}\to \mathbb {F} _{q^{m}}}$ by using a suitable basis of ${\displaystyle \mathbb {F} _{q^{n}}}$ over ${\displaystyle \mathbb {F} _{q}}$. In almost all applications the polynomials are quadratic, i.e. they have degree 2. We start with the simplest kind of polynomials, namely monomials, and show how they lead to quadratic systems of equations.

...
Wikipedia