Optimal strategies for computation of degree $\ell^n$ isogenies for SIDH
Abstract
Full Text:
PDFReferences
@InProceedings{Cos16,
author="Costello, Craig
and Longa, Patrick
and Naehrig, Michael",
editor="Robshaw, Matthew
and Katz, Jonathan",
title="Efficient Algorithms for Supersingular Isogeny Diffie-Hellman",
booktitle="Advances in Cryptology -- CRYPTO 2016",
year="2016",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="572--601",
abstract="We propose a new suite of algorithms that significantly improve the performance of supersingular isogeny Diffie-Hellman (SIDH) key exchange. Subsequently, we present a full-fledged implementation of SIDH that is geared towards the 128-bit quantum and 192-bit classical security levels. Our library is the first constant-time SIDH implementation and is up to 2.9 times faster than the previous best (non-constant-time) SIDH software. The high speeds in this paper are driven by compact, inversion-free point and isogeny arithmetic and fast SIDH-tailored field arithmetic: on an Intel Haswell processor, generating ephemeral public keys takes 46 million cycles for Alice and 52 million cycles for Bob, while computing the shared secret takes 44 million and 50 million cycles, respectively. The size of public keys is only 564 bytes, which is significantly smaller than most of the popular post-quantum key exchange alternatives. Ultimately, the size and speed of our software illustrates the strong potential of SIDH as a post-quantum key exchange candidate and we hope that these results encourage a wider cryptanalytic effort.",
isbn="978-3-662-53018-4"
}
@misc{Feo11,
author = {Luca De Feo and David Jao and Jérôme Plût},
title = {Towards quantum-resistant cryptosystems from supersingular elliptic curve isogenies},
howpublished = {Cryptology ePrint Archive, Report 2011/506},
year = {2011},
note = {url{https://eprint.iacr.org/2011/506}},
}
@InProceedings{Cos17,
author="Costello, Craig
and Hisil, Huseyin",
editor="Takagi, Tsuyoshi
and Peyrin, Thomas",
title="A Simple and Compact Algorithm for SIDH with Arbitrary Degree Isogenies",
booktitle="Advances in Cryptology -- ASIACRYPT 2017",
year="2017",
publisher="Springer International Publishing",
address="Cham",
pages="303--329",
abstract="We derive a new formula for computing arbitrary odd-degree isogenies between elliptic curves in Montgomery form. The formula lends itself to a simple and compact algorithm that can efficiently compute any low odd-degree isogenies inside the supersingular isogeny Diffie-Hellman (SIDH) key exchange protocol. Our implementation of this algorithm shows that, beyond the commonly used 3-isogenies, there is a moderate degradation in relative performance of {$}{$}(2d+1){$}{$}(2d+1)-isogenies as d grows, but that larger values of d can now be used in practical SIDH implementations.",
isbn="978-3-319-70697-9"
}
Refbacks
- There are currently no refbacks.
International Journal of Electronics and Telecommunications
is a periodical of Electronics and Telecommunications Committee
of Polish Academy of Sciences
eISSN: 2300-1933