Failing to Hash Into Supersingular Isogeny Graphs.

Saved in:
Bibliographic Details
Title: Failing to Hash Into Supersingular Isogeny Graphs.
Authors: Booher, Jeremy1, Bowden, Ross2, Doliskani, Javad3, Fouotsa, Tako Boris4, Galbraith, Steven D5, Kunzweiler, Sabrina6, Merz, Simon-Philipp7, Petit, Christophe8,9, Smith, Benjamin10, Stange, Katherine E11 kstange@math.colorado.edu, Ti, Yan Bo12, Vincent, Christelle13, Voloch, José Felipe14, Weitkämper, Charlotte9, Zobernig, Lukas5
Source: Computer Journal. Aug2024, Vol. 67 Issue 8, p2702-2719. 18p.
Subjects: Cryptography, Hashing, Random walks, Elliptic curves, Polynomials
Abstract: An important open problem in supersingular isogeny-based cryptography is to produce, without a trusted authority, concrete examples of 'hard supersingular curves' that is equations for supersingular curves for which computing the endomorphism ring is as difficult as it is for random supersingular curves. A related open problem is to produce a hash function to the vertices of the supersingular |$\ell $| -isogeny graph, which does not reveal the endomorphism ring, or a path to a curve of known endomorphism ring. Such a hash function would open up interesting cryptographic applications. In this paper, we document a number of (thus far) failed attempts to solve this problem, in the hope that we may spur further research, and shed light on the challenges and obstacles to this endeavour. The mathematical approaches contained in this article include: (i) iterative root-finding for the supersingular polynomial; (ii) gcd's of specialized modular polynomials; (iii) using division polynomials to create small systems of equations; (iv) taking random walks in the isogeny graph of abelian surfaces, and applying Kummer surfaces and (v) using quantum random walks. [ABSTRACT FROM AUTHOR]
Copyright of Computer Journal is the property of Oxford University Press / USA and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
FullText Text:
  Availability: 0
Header DbId: egs
DbLabel: Engineering Source
An: 179059427
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Failing to Hash Into Supersingular Isogeny Graphs.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Booher%2C+Jeremy%22">Booher, Jeremy</searchLink><relatesTo>1</relatesTo><br /><searchLink fieldCode="AR" term="%22Bowden%2C+Ross%22">Bowden, Ross</searchLink><relatesTo>2</relatesTo><br /><searchLink fieldCode="AR" term="%22Doliskani%2C+Javad%22">Doliskani, Javad</searchLink><relatesTo>3</relatesTo><br /><searchLink fieldCode="AR" term="%22Fouotsa%2C+Tako+Boris%22">Fouotsa, Tako Boris</searchLink><relatesTo>4</relatesTo><br /><searchLink fieldCode="AR" term="%22Galbraith%2C+Steven+D%22">Galbraith, Steven D</searchLink><relatesTo>5</relatesTo><br /><searchLink fieldCode="AR" term="%22Kunzweiler%2C+Sabrina%22">Kunzweiler, Sabrina</searchLink><relatesTo>6</relatesTo><br /><searchLink fieldCode="AR" term="%22Merz%2C+Simon-Philipp%22">Merz, Simon-Philipp</searchLink><relatesTo>7</relatesTo><br /><searchLink fieldCode="AR" term="%22Petit%2C+Christophe%22">Petit, Christophe</searchLink><relatesTo>8,9</relatesTo><br /><searchLink fieldCode="AR" term="%22Smith%2C+Benjamin%22">Smith, Benjamin</searchLink><relatesTo>10</relatesTo><br /><searchLink fieldCode="AR" term="%22Stange%2C+Katherine+E%22">Stange, Katherine E</searchLink><relatesTo>11</relatesTo><i> kstange@math.colorado.edu</i><br /><searchLink fieldCode="AR" term="%22Ti%2C+Yan+Bo%22">Ti, Yan Bo</searchLink><relatesTo>12</relatesTo><br /><searchLink fieldCode="AR" term="%22Vincent%2C+Christelle%22">Vincent, Christelle</searchLink><relatesTo>13</relatesTo><br /><searchLink fieldCode="AR" term="%22Voloch%2C+José+Felipe%22">Voloch, José Felipe</searchLink><relatesTo>14</relatesTo><br /><searchLink fieldCode="AR" term="%22Weitkämper%2C+Charlotte%22">Weitkämper, Charlotte</searchLink><relatesTo>9</relatesTo><br /><searchLink fieldCode="AR" term="%22Zobernig%2C+Lukas%22">Zobernig, Lukas</searchLink><relatesTo>5</relatesTo>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22Computer+Journal%22">Computer Journal</searchLink>. Aug2024, Vol. 67 Issue 8, p2702-2719. 18p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Cryptography%22">Cryptography</searchLink><br /><searchLink fieldCode="DE" term="%22Hashing%22">Hashing</searchLink><br /><searchLink fieldCode="DE" term="%22Random+walks%22">Random walks</searchLink><br /><searchLink fieldCode="DE" term="%22Elliptic+curves%22">Elliptic curves</searchLink><br /><searchLink fieldCode="DE" term="%22Polynomials%22">Polynomials</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: An important open problem in supersingular isogeny-based cryptography is to produce, without a trusted authority, concrete examples of 'hard supersingular curves' that is equations for supersingular curves for which computing the endomorphism ring is as difficult as it is for random supersingular curves. A related open problem is to produce a hash function to the vertices of the supersingular |$\ell $| -isogeny graph, which does not reveal the endomorphism ring, or a path to a curve of known endomorphism ring. Such a hash function would open up interesting cryptographic applications. In this paper, we document a number of (thus far) failed attempts to solve this problem, in the hope that we may spur further research, and shed light on the challenges and obstacles to this endeavour. The mathematical approaches contained in this article include: (i) iterative root-finding for the supersingular polynomial; (ii) gcd's of specialized modular polynomials; (iii) using division polynomials to create small systems of equations; (iv) taking random walks in the isogeny graph of abelian surfaces, and applying Kummer surfaces and (v) using quantum random walks. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of Computer Journal is the property of Oxford University Press / USA and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=179059427
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.1093/comjnl/bxae038
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 18
        StartPage: 2702
    Subjects:
      – SubjectFull: Cryptography
        Type: general
      – SubjectFull: Hashing
        Type: general
      – SubjectFull: Random walks
        Type: general
      – SubjectFull: Elliptic curves
        Type: general
      – SubjectFull: Polynomials
        Type: general
    Titles:
      – TitleFull: Failing to Hash Into Supersingular Isogeny Graphs.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Booher, Jeremy
      – PersonEntity:
          Name:
            NameFull: Bowden, Ross
      – PersonEntity:
          Name:
            NameFull: Doliskani, Javad
      – PersonEntity:
          Name:
            NameFull: Fouotsa, Tako Boris
      – PersonEntity:
          Name:
            NameFull: Galbraith, Steven D
      – PersonEntity:
          Name:
            NameFull: Kunzweiler, Sabrina
      – PersonEntity:
          Name:
            NameFull: Merz, Simon-Philipp
      – PersonEntity:
          Name:
            NameFull: Petit, Christophe
      – PersonEntity:
          Name:
            NameFull: Smith, Benjamin
      – PersonEntity:
          Name:
            NameFull: Stange, Katherine E
      – PersonEntity:
          Name:
            NameFull: Ti, Yan Bo
      – PersonEntity:
          Name:
            NameFull: Vincent, Christelle
      – PersonEntity:
          Name:
            NameFull: Voloch, José Felipe
      – PersonEntity:
          Name:
            NameFull: Weitkämper, Charlotte
      – PersonEntity:
          Name:
            NameFull: Zobernig, Lukas
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 08
              Text: Aug2024
              Type: published
              Y: 2024
          Identifiers:
            – Type: issn-print
              Value: 00104620
          Numbering:
            – Type: volume
              Value: 67
            – Type: issue
              Value: 8
          Titles:
            – TitleFull: Computer Journal
              Type: main
ResultId 1