Isogeny formulas for Jacobi intersection and twisted Hessian curves (Q2194515)

Isogenies on elliptic curves defined over finite fields are one of the most promising tools for the design of postquantum cryptographic schemes. This has caused a growing interest for efficient formulas to compute those isogenies. Motivated by a previous work by \textit{D. Moody} and \textit{D. Shumow} [Math. Comput. 85, No. 300, 1929--1951 (2016; Zbl 1339.14026)] the present paper proposes formulas for two models of elliptic curves: Jacobi intersection, see [\textit{R. Feng} et al., Lect. Notes Comput. Sci. 6108, 199--210 (2010; Zbl 1284.14035)] and twisted Hessian models, see [\textit{D. J. Bernstein} et al., ibid. 9230, 269--294 (2015; Zbl 1370.94487)]. These formulas have a multiplicative character instead of the classical additive formulas of \textit{J. Vélu} [C. R. Acad. Sci., Paris, Sér. A 273, 238--241 (1971; Zbl 0225.14014)] and the authors claim that they have a less computational cost that previous proposals. Section 2 gives the definition and addition formulas for the two models and also for other alternative models (Edwards and Huff models) and Section 3 summarizes the properties of isogenies and the Velu's formulas for isogenies on elliptic curves given by a Weiertrass equation. Section 4 studies the case of Jacobi intersection isogenies. Theorem 4.1 gives formulas for a isogeny with given kernel from a curve \(J_a\) to other \(J_{\hat{a}}\), with coefficient \(\hat{a}\) specified. Section 5 find similar formulas for the case of twisted Hessian curves. Section 6 studies the computational cost of the isogeny formulas for the two proposed models, both in affine and projective coordinates, and compares them with the cost for other alternative models: Edwards, Huff, extended Jacobi quartic and Weiertrass (Tables 1 to 4). It is worthy to point out that a recent paper [\textit{J. H. Cheon} et al., Lect. Notes Comput. Sci. 11922, 415--445 (2019; Zbl 1455.94139)] also improves the cost of isogenies on Edwards curves.