On Forging SPHINCS+^{+}-Haraka Signatures on a Fault-Tolerant Quantum Computer

SPHINCS$^{+}$ is a state-of-the-art hash based signature scheme, the security of which is either based on SHA-256, SHAKE-256 or on the Haraka hash function. In this work, we perform an in-depth analysis of how the hash functions are embedded into SPHINCS$^+$ and how the quantum pre-image resistance impacts the security of the signature scheme. Subsequently, we evaluate the cost of implementing Grover’s quantum search algorithm to find a pre-image that admits a universal forgery. In particular, we provide quantum implementations of the Haraka and SHAKE-256 hash functions in Q# and consider the efficiency of attacks in the context of fault-tolerant quantum computers. We restrict our findings to SPHINCS$^+$-128 due to the limited security margin of Haraka. Nevertheless, we present an attack that performs better, to the best of our knowledge, than previously published attacks. We can forge a SPHINCS$^+$-128-Haraka signature in about $1.5\cdot 2^{90}$ surface code cycles and $2.03\cdot 10^6$ physical qubits, translating to about $1.55\cdot 2^{101}$ logical-qubit-cycles. For SHAKE-256, the same attack requires $8.65\cdot 10^6$ qubits and $1.6\cdot 2^{84}$ cycles resulting in about $2.65\cdot 2^{99}$ logical-qubit-cycles

Post-Quantum Provably-Secure Authentication and MAC from Mersenne Primes

This paper presents a novel, yet efficient secret-key authentication and MAC, which provide post-quantum security promise, whose security is reduced to the quantum-safe conjectured hardness of Mersenne Low Hamming Combination (MERS) assumption recently introduced by Aggarwal, Joux, Prakash, and Santha (CRYPTO 2018). Our protocols are very suitable to weak devices like smart card and RFID tags

High-Work-Function Molybdenum Oxide Hole Extraction Contacts in Hybrid Organic–Inorganic Perovskite Solar Cells

We investigate the effect of high work function contacts in halide perovskite absorber-based photovoltaic devices. Photoemission spectroscopy measurements reveal that band bending is induced in the absorber by the deposition of the high work function molybdenum trioxide (MoO₃). We find that direct contact between MoO₃ and the perovskite leads to a chemical reaction, which diminishes device functionality. Introducing an ultrathin spiro-MeOTAD buffer layer prevents the reaction, yet the altered evolution of the energy levels in the methylammonium lead iodide (MAPbI₃) layer at the interface still negatively impacts device performance

Effect of Coordination Sphere Geometry of Copper Redox Mediators on Regeneration and Recombination Behavior in Dye-Sensitized Solar Cell Applications

The recombination of injected electrons with oxidized redox species and regeneration behavior of copper redox mediators are investigated for four copper complexes, [Cu(dmby)2]2+/1+ (dmby = 6,6′-dimethyl-2,2′-bipyridine), [Cu(tmby)2]2+/1+ (tmby = 4,4′,6,6′- tetramethyl-2,2′-bipyridine), [Cu(eto)2]2+/1+ (eto = 4-ethoxy-6,6′-dimethyl-2,2′-bipyridine), and [Cu(dmp)2]2+/1+ (dmp = bis(2,9-dimethyl-1,10-phenantroline). These complexes were examined in conjunction with the D5, D35, and D45 sensitizers, having various degrees of blocking moieties. The experimental results were further supported by density functional theory calculations, showing that the low reorganization energies, λ, of tetra-coordinated Cu(I) species (λ = 0.31–0.34 eV) allow efficient regeneration of the oxidized dye at driving forces down to approximately 0.1 eV. The regeneration electron transfer reaction is in the Marcus normal regime. However, for Cu(II) species, the presence of 4-tert-butylpyridine (TBP) in electrolyte medium results in penta-coordinated complexes with altered charge recombination kinetics (λ = 1.23–1.40 eV). These higher reorganization energies lead to charge recombination in the Marcus normal regime instead of the Marcus inverted regime that could have been expected from the large driving force for electrons in the conduction band of TiO2 to react with Cu(II). Nevertheless, the recombination resistance and electron lifetime values were higher for the copper redox species compared to the reference cobalt redox mediator. The DSC devices employing D35 dye with [Cu(dmp)2]2+/1+ reached a record value for the open circuit voltage of 1.14 V without compromising the short circuit current density value. Even with the D5 dye, which lacks recombination preventing steric units, we reached 7.5% efficiency by employing [Cu(dmp)2]2+/1+ and [Cu(dmby)2]2+/1+ at AM 1.5G full sun illumination with open circuit voltage values as high as 1.13 V