Scholarlink

A crucial ingredient for many cryptographic primitives such as key exchange protocols and advanced signature schemes is a commutative group action where the structure of the underlying group can be computed efficiently. SCALLOP provides such a group action, based on oriented supersingular elliptic curves. We present PEARL-SCALLOP, a variant of SCALLOP that changes several parameter and design choices, thereby improving on both efficiency and security and enabling feasible parameter generation for larger security levels. Within the SCALLOP framework, our parameters are essentially optimal; the orientation is provided by a \(2^e\) -isogeny, where \(2^e\) is roughly equal to the discriminant of the acting class group. As an important subroutine we present a practical algorithm for generating oriented supersingular elliptic curves. To demonstrate our improvements, we provide a proof-of-concept implementation which instantiates PEARL-SCALLOP at record-sized security levels.For the previous largest parameter set, equivalent to CSIDH-1024, our timings are more than an order of magnitude faster than any other SCALLOP version.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Faster SCALLOP from Non-prime Conductor Suborders in Medium Sized Quadratic Fields

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Bill Allombert,
  • Jean-François Biasse,
  • Jonathan Komada Eriksen,
  • Péter Kutas,
  • Chris Leonardi,
  • Aurel Page,
  • Renate Scheidler,
  • Márton Tot Bagi

摘要

A crucial ingredient for many cryptographic primitives such as key exchange protocols and advanced signature schemes is a commutative group action where the structure of the underlying group can be computed efficiently. SCALLOP provides such a group action, based on oriented supersingular elliptic curves. We present PEARL-SCALLOP, a variant of SCALLOP that changes several parameter and design choices, thereby improving on both efficiency and security and enabling feasible parameter generation for larger security levels. Within the SCALLOP framework, our parameters are essentially optimal; the orientation is provided by a \(2^e\) -isogeny, where \(2^e\) is roughly equal to the discriminant of the acting class group. As an important subroutine we present a practical algorithm for generating oriented supersingular elliptic curves. To demonstrate our improvements, we provide a proof-of-concept implementation which instantiates PEARL-SCALLOP at record-sized security levels.For the previous largest parameter set, equivalent to CSIDH-1024, our timings are more than an order of magnitude faster than any other SCALLOP version.