Supersingular curves with small non-integer endomorphisms

Abstract: We introduce a special class of supersingular curves over $\mathbb{F}_{p^2}$, characterized by the existence of non-integer endomorphisms of small degree. A number of properties of this set is proved. Most notably, we show that when this set partitions into subsets in such a way that curves within each subset have small-degree isogenies between them, but curves in distinct subsets have no small-degree isogenies between them. Despite this, we show that isogenies between these curves can be computed efficiently, giving a technique for computing isogenies between certain prescribed curves that cannot be reasonably connected by searching on $\ell$-isogeny graphs.

cryptography and securityalgebraic geometrynumber theory

Audience: researchers in the topic

( chat | paper | slides | video )

Comments: The slides used in the pre-recorded video can be found here.

Chairs: Steven Galbraith and Christophe Petit

---

Algorithmic Number Theory Symposium (ANTS XIV)

Series comments: Registration is now open. Registration is free but required to access the chat and livestream.

This is a hybrid synchronous/asynchronous conference with several ways to participate.

• Click the "paper" link to view contributed papers and posters (open to all).
• Click the "video" link to view pre-recorded talks of accepted papers (open to all).
  These are 15-20 minutes aimed at a general algorithmic number theory audience.
• Click the "slides" link to view slides used in the pre-recorded video when available (open to all).
• Click the "chat" link to access the chat stream related to the talk or poster before, during, and after the live event (registration required).
• Click the "livestream" button to join the live event when it is taking place (registration required and you must be logged in).
  For accepted papers the audience will be expected to have watched the pre-recorded video and have the paper in front of them.

The invited talks will be recorded and made available via the "video" link after the talk is over. None of the other sessions will be recorded.

---