New Algorithms for the Deuring Correspondence

Feo, Luca De; Leroux, Antonin; Longa, Patrick; Wesolowski, Benjamin

doi:10.1007/978-3-031-30589-4_23

Cited by 15 publications

(1 citation statement)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…L1L2 . This idea of decomposing an endomorphism into a cycle of two isogenies is now quite standard in isogeny-based cryptography (see for instance [28,49]).…”

Section: Effective Orientationmentioning

confidence: 99%

SCALLOP: Scaling the CSI-FiSh

Feo

Fouotsa

Kutas

et al. 2023

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

We present SCALLOP: SCALable isogeny action based on Oriented supersingular curves with Prime conductor, a new group action based on isogenies of supersingular curves. Similarly to CSIDH and OSIDH, we use the group action of an imaginary quadratic order's class group on the set of oriented supersingular curves. Compared to CSIDH, the main benefit of our construction is that it is easy to compute the class-group structure; this data is required to uniquely represent -and efficiently act by -arbitrary group elements, which is a requirement in, e.g., the CSI-FiSh signature scheme by Beullens, Kleinjung and Vercauteren. The index-calculus algorithm used in CSI-FiSh to compute Author list in alphabetical order; see https://ams.org/profession/leaders/CultureStat ement04.pdf.

show abstract

“…L1L2 . This idea of decomposing an endomorphism into a cycle of two isogenies is now quite standard in isogeny-based cryptography (see for instance [28,49]).…”

Section: Effective Orientationmentioning

confidence: 99%

SCALLOP: Scaling the CSI-FiSh

Feo

Fouotsa

Kutas

et al. 2023

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

A New Isogeny Representation and Applications to Cryptography

Leroux

2022

Lecture Notes in Computer Science

View full text Add to dashboard Cite

This paper focuses on isogeny representations, defined as ways to evaluate isogenies and verify membership to the language of isogenous supersingular curves (the set of triples D, E1, E2 with a cyclic isogeny of degree D between E1 and E2). The tasks of evaluating and verifying isogenies are fundamental for isogeny-based cryptography. Our main contribution is the design of the suborder representation, a new isogeny representation targetted at the case of (big) prime degree. The core of our new method is the revelation of endomorphisms of smooth norm inside a well-chosen suborder of the codomain's endomorphism ring. This new representation appears to be opening interesting prospects for isogeny-based cryptography under the hardness of a new computational problem: the SubOrder to Ideal Problem (SOIP). As an application, we introduce pSIDH, a new NIKE based on the suborder representation. Studying new assumption appears to be particularly crucial in the light of the recent attacks against isogeny-based cryptography. In order to manipulate efficiently the suborder representation, we develop several heuristic algorithmic tools to solve norm equations inside a new family of quaternion orders. These new algorithms may be of independent interest.

show abstract