SIDH key recovery
Recover a secret isogeny using a SIDH public key, including its auxiliary torsion-point images.
Classical · known endomorphism ring
SIDH with known endomorphism ring of the starting curve; source factorization conditions
Results
| # | PUBLICATION / AUTHORS | DATE | TIME BOUND | SPACE BOUND | EVIDENCE |
|---|---|---|---|---|---|
| — | An efficient key recovery attack on SIDHEurocrypt 2023SourceBibTeX / details | 30 Jul 2022 | Heuristic polynomial time, apart from parameter-dependent integer factorizations | Not stated in the checked source | PublishedSource checked |
Comparison definition & assumptions
- Regime
- SIDH with known endomorphism ring of the starting curve; source factorization conditions
- Computation
- Classical
- Rigor
- Heuristic
- Instances
- SIDH public auxiliary torsion images
- Cost scale
- Parameter-dependent
- Parameter
- log p
- Description
- SIDH with known endomorphism ring of the starting curve; source factorization conditions
- Comparison rules
- A SIDH public key supplies auxiliary torsion-point images. Attacks exploiting these images must not be listed as polynomial algorithms for the unadorned supersingular isogeny problem. Do not replace a polynomial expression by an invented exponent zero.
- Tags
- SIDH, auxiliary torsion, known endomorphism ring