CryptoRecords.info
SIDH

SIDH key recovery

Recover a secret isogeny using a SIDH public key, including its auxiliary torsion-point images.

Classical · polynomial time

SIDH key recovery including a random starting curve

1 results · 1 papers
ClassicalProvableSIDH public auxiliary torsion imagesPolynomial in input size
Results
Compare historyJSONCSV
#PUBLICATION / AUTHORSDATETIME BOUNDSPACE BOUNDEVIDENCE
—Breaking SIDH in polynomial timeDamien RobertEurocrypt 2023SourceBibTeX / details10 Aug 2022Polynomial in the input sizeNot stated in the checked sourcePublishedSource checked
1–1 of 1 entriesIncludes relevant non-record results. Dates refer to the specific bound.
Comparison definition & assumptions
Regime
SIDH key recovery including a random starting curve
Computation
Classical
Rigor
Provable
Instances
SIDH public auxiliary torsion images
Cost scale
Polynomial in input size
Parameter
log p
Description
SIDH key recovery including a random starting curve
Comparison rules
Structural breaks are displayed by their full complexity class rather than a scalar exponent. Auxiliary torsion images are essential, and this does not solve unrestricted supersingular isogeny search in polynomial time.
Tags
SIDH, auxiliary torsion, polynomial time