Abstract
We study cryptosystems based on supersingular isogenies. This is an active area of research in post-quantum cryptography. Our first contribution is to give a very powerful active attack on the supersingular isogeny encryption scheme. This attack can only be prevented by using a (relatively expensive) countermeasure. Our second contribution is to show that the security of all schemes of this type depends on the difficulty of computing the endomorphism ring of a supersingular elliptic curve. This result gives significant insight into the difficulty of the isogeny problem that underlies the security of these schemes. Our third contribution is to give a reduction that uses partial knowledge of shared keys to determine an entire shared key. This can be used to retrieve the secret key, given information leaked from a side-channel attack on the key exchange protocol. A corollary of this work is the first bit security result for the supersingular isogeny key exchange: Computing any component of the j-invariant is as hard as computing the whole j-invariant.
Our paper therefore provides an improved understanding of the security of these cryptosystems. We stress that our work does not imply that these systems are insecure, or that they should not be used. However, it highlights that implementations of these schemes will need to take account of the risks associated with various active and side-channel attacks.
Our paper therefore provides an improved understanding of the security of these cryptosystems. We stress that our work does not imply that these systems are insecure, or that they should not be used. However, it highlights that implementations of these schemes will need to take account of the risks associated with various active and side-channel attacks.
Original language | English |
---|---|
Title of host publication | Advances in Cryptology – ASIACRYPT 2016 |
Subtitle of host publication | 22nd International Conference on the Theory and Application of Cryptology and Information Security, Hanoi, Vietnam, December 4-8, 2016, Proceedings, Part I |
Editors | Jung Hee Cheon, Tsuyoshi Takagi |
Publisher | Springer |
Pages | 63-91 |
ISBN (Electronic) | 9783662538876 |
ISBN (Print) | 9783662538869 |
DOIs | |
Publication status | Published - 9 Nov 2016 |
Event | 22nd International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT 2016) - Hanoi, Viet Nam Duration: 4 Dec 2016 → 8 Dec 2016 |
Publication series
Name | Lecture Notes in Computer Science (LNCS) |
---|---|
Volume | 10031 |
ISSN (Print) | 0302-9743 |
ISSN (Electronic) | 1611-3349 |
Conference
Conference | 22nd International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT 2016) |
---|---|
Country/Territory | Viet Nam |
City | Hanoi |
Period | 4/12/16 → 8/12/16 |
Keywords
- isogenies
- supersingular elliptic curves