3 years ago for the final paper in a class in college i wrote part of it on some applications of supersingular isogenies in crypto. the section was atrocious and i regret writing it but i thought i would never have to think about them again.
looking forward to this from @durumcrustulum: some serious crypto(graphy), plus a case study in the cycle of scientific/mathematical discovery, testing, and ultimately revocation
(an approachable tl;dr on the latter w/ a lot of good links might be https://t.co/JrjdaztYun)
I feel like my crypto coffee table book @cryptolexicon could use an update with new terms:
- SIDH (I've SIKE and CSIDH)
- laptop
- ZKPs (PLONK family?)
- protocol types (poly commitments, etc.)
suggestions? (see in https://t.co/fXQy6qg17b and https://t.co/Vrn2a0lGWM)
NIST's round 4 post-quantum crypto candidate SIKE has been defeated. In this #RootCauses episode we explain isogeny #cryptography, why #NIST is seeking additional candidates & why failures of this kind are expected & healthy for #postquantumcryptography. https://t.co/WJKKrjRAaq
It was ported to and broken in SageMath. (!)
"Are the isogenies kaput?! There's a new attack that breaks all the known parameter sets for SIDH/SIKE, so Steven Galbraith helps explain where the hell this came from, and where isogeny crypto goes from here."
https://t.co/1nxGt9WNTp
🌅Good morning! In the morning sessions, we learn about isogenies, endomorphism rings, Deuring correspondence, and isogeny-based crypto from Christophe Petit.
🌋🚶♀️
“No doubt this will reduce confidence in #isogenies. The sudden appearance of an attack this powerful shows the field is not yet mature. The relatively recent attack by Ward Beullens on #Rainbow has a similar impact on multivariate #crypto.” @EllipticKiwi
https://t.co/sMIDgjSRB8
Galbraith: “Why was [the attack] only discovered now? …what was necessary to find the attack was to have a community of scholars studying “esoteric” subjects like extending isogeny crypto to abelian surfaces.”
“This is the power of generalisation and extension. So what was necessary to find the attack was to have a community of scholars studying “esoteric” subjects like extending isogeny crypto to abelian surfaces.”
Luckily people delayed the SIDH hardware roll-out; not much "dead silicon" around. SIDH hardware would have been big, and optimization has to do with low-level detail, specific forms of primes, etc. Even if some replacement Isogeny crypto emerges, much of that is obsolete now.
Accidentally left the house with no headphones or book. Please can someone drop links to good maths / crypto papers for me to read?
Bonus points for “elliptic” or “isogeny” appearing somewhere in the abstract.