On collisions related to an ideal class of order 3 in CSIDH

DOI10.1007/978-3-030-58208-1_8MaRDI QIDQ1995506zbMATH OpenOpenAlexFDO

Authors Hiroshi Onuki, Tsuyoshi Takagi

Publication date 23 February 2021

Full work available at URL https://doi.org/10.1007/978-3-030-58208-1_8

zbMATH Keywords

CISDHideal class groupsisogeny-based cryptographypost-quantum cryptographysupersingular elliptic curve isogenies

Mathematics Subject Classification ID

Quantum cryptography (quantum-theoretic aspects) (81P94) Cryptography (94A60)

Review text

The authors of this paper study an isogeny-based key exchange for post quantum cryptography. It is based on the action of an ideal class group on isomorphism classes of supersingular elliptic curves. In the key exchange, the classes are represented by vectors with integer coefficients and the number of ideal classes is related to the security level ofthe system. They study the correspondence between the integer vectors and the ideal classes and proof that the all ones vector corresponds to an ideal class of order 3 and, therefore, distinct vectors belongs to the same ideal class. This means that distinct secret keys correspond to the same public key. In the final part of the paper, they show a new ideal representation that does not include those collisions. For the entire collection see [Zbl 1454.68007].

Recommendations

• On the security of OSIDH
• CSIDH: an efficient post-quantum commutative group action
• Post-quantum cryptography from supersingular isogenies
• Practical isogeny-based key-exchange with optimal tightness
• Towards practical key exchange from ordinary isogeny graphs

Cited in

(8)

• SiGamal: a supersingular isogeny-based PKE and its application to a PRF
• CSIDH on the surface
• A review of mathematical and computational aspects of CSIDH algorithms
• Solving the hidden number problem for CSIDH and CSURF via automated Coppersmith
• Full quantum equivalence of group action DLog and CDH, and more
• Deterministic algorithms for class group actions
• Higher-degree supersingular group actions
• On the (non-)existence of efficient class group orbits for collision search in CSIDH

This page was built for publication: On collisions related to an ideal class of order 3 in CSIDH

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q1995506)