Orienteering with one endomorphism

Abstract: Supersingular isogeny-based cryptosystems are strong contenders for post-quantum cryptography standardization. Such cryptosystems rely on the hardness of path-finding on supersingular isogeny graphs. The path-finding problem is known to reduce to the endomorphism ring problem. Can path-finding be reduced to knowing just one endomorphism? In this talk, we give explicit classical and quantum algorithms for path-finding to an initial curve using the knowledge of one endomorphism. An endomorphism gives an orientation of a supersingular elliptic curve. We use the theory of oriented supersingular isogeny graphs and algorithms for taking ascending/descending/horizontal steps on such graphs.

paper link: arxiv.org/pdf/2201.11079.pdf

number theory

Audience: researchers in the topic

UCLA Number Theory Seminar