En poursuivant votre navigation sur ce site, vous acceptez l'utilisation d'un simple cookie d'identification. Aucune autre exploitation n'est faite de ce cookie. OK

Manage my selections

  • z

    Destination de la recherche

    Raccourcis

    1

    An efficient break of the supersingular isogeny Diffie-Hellman protocol

    Bookmarks Report an error
    Multi angle
    Authors : Castryck, Wouter (Author of the conference)
    CIRM (Publisher )

    00:00
    00:00
     

    Abstract : Finding an explicit isogeny between two given isogenous elliptic curves over a finite field is considered a hard problem, even for quantum computers. In 2011 this led Jao and De Feo to propose a key exchange protocol that became known as SIDH, shorthand for Supersingular Isogeny Diÿe-Hellman. The security of SIDH does not rely on a pure isogeny problem, due to certain 'auxiliary' elliptic curve points that are exchanged during the protocol (for constructive reasons). In this talk I will discuss a break of SIDH that was discovered in collaboration with Thomas Decru. The attack uses isogenies between abelian surfaces and exploits the aforementioned auxiliary points, so it does not break the pure isogeny problem. I will also discuss improvements of this attack due to Maino et al. and Robert, as well as a countermeasure by Fouotsa et al., along with breaks of this countermeasure in some special cases.

    Keywords : elliptic curves; isogenies; abelian surfaces; cryptography

    MSC Codes :
    14G15 - Finite ground fields
    14G50 - Applications to coding theory and cryptography - application à la théorie de codes et à la cryptographie
    14H40 - Jacobians, Prym varieties
    14H52 - Elliptic curves
    14K02 - Isogeny

      Information on the Video

      Film maker : Hennenfent, Guillaume
      Language : English
      Available date : 28/06/2023
      Conference Date : 05/06/2023
      Subseries : Research talks
      arXiv category : Number Theory ; Algebraic Geometry ; Cryptography and Security
      Mathematical Area(s) : Computer Science ; Algebraic & Complex Geometry ; Number Theory
      Format : MP4 (.mp4) - HD
      Video Time : 00:54:58
      Targeted Audience : Researchers ; Graduate Students ; Doctoral Students, Post-Doctoral Students
      Download : https://videos.cirm-math.fr/2023-06-08_Castryck.mp4

    Information on the Event

    Event Title : AGCT - Arithmetic, Geometry, Cryptography and Coding Theory / AGCT - Arithmétique, géométrie, cryptographie et théorie des codes
    Event Organizers : Anni, Samuele ; Bruin, Nils ; Kohel, David ; Martindale, Chloe
    Dates : 05/06/2023 - 09/06/2023
    Event Year : 2023
    Event URL : https://conferences.cirm-math.fr/2889.html

    Citation Data

    DOI : 10.24350/CIRM.V.20055403
    Cite this video as: Castryck, Wouter (2023). An efficient break of the supersingular isogeny Diffie-Hellman protocol. CIRM. Audiovisual resource. doi:10.24350/CIRM.V.20055403
    URI : http://dx.doi.org/10.24350/CIRM.V.20055403

    See Also

    Bibliography

    • CASTRYCK, Wouter et DECRU, Thomas. An efficient key recovery attack on SIDH. In : Annual International Conference on the Theory and Applications of Cryptographic Techniques. Cham : Springer Nature Switzerland, 2023. p. 423-447. - http://dx.doi.org/10.1007/978-3-031-30589-4_15

    • MAINO, Luciano, MARTINDALE, Chloe, PANNY, Lorenz, et al. A direct key recovery attack on SIDH. In : Annual International Conference on the Theory and Applications of Cryptographic Techniques. Cham : Springer Nature Switzerland, 2023. p. 448-471. - http://dx.doi.org/10.1007/978-3-031-30589-4_16

    • ROBERT, Damien. Breaking SIDH in polynomial time. In : Annual International Conference on the Theory and Applications of Cryptographic Techniques. Cham : Springer Nature Switzerland, 2023. p. 472-503. - http://dx.doi.org/10.1007/978-3-031-30589-4_17



    Imagette Video

    Bookmarks Report an error
    Close