|
| | | | |
| | | |
| Stat |
Members: 3645
Articles: 2'501'711
Articles rated: 2609
19 April 2024 |
|
| | | | |
|
Article overview
| |
|
|
Hash functions from superspecial genus-2 curves using Richelot isogenies | | Wouter Castryck
; Thomas Decru
; Benjamin Smith
; | | Date: |
15 Mar 2019 | | Abstract: | Last year Takashima proposed a version of Charles, Goren and Lauter’s hash
function using Richelot isogenies, starting from a genus-2 curve that allows
for all subsequent arithmetic to be performed over a quadratic finite field
Fp2. In a very recent paper Flynn and Ti point out that Takashima’s hash
function is insecure due to the existence of small isogeny cycles. We revisit
the construction and show that it can be repaired by imposing a simple
restriction, which moreover clarifies the security analysis. The runtime of the
resulting hash function is dominated by the extraction of 3 square roots for
every block of 3 bits of the message, as compared to one square root per bit in
the elliptic curve case; however in our setting the extractions can be
parallelized and are done in a finite field whose bit size is reduced by a
factor 3. Along the way we argue that the full supersingular isogeny graph is
the wrong context in which to study higher-dimensional analogues of Charles,
Goren and Lauter’s hash function, and advocate the use of the superspecial
subgraph, which is the natural framework in which to view Takashima’s
Fp2-friendly starting curve. | | Source: | arXiv, 1903.6451 | | Services: | Forum | Review | PDF | Favorites | |
|
|
No review found.
Did you like this article?
Note: answers to reviews or questions about the article must be posted in the forum section.
Authors are not allowed to review their own article. They can use the forum section.
browser Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
|
| |
|
|
|
|
News, job offers and information for researchers and scientists:
| |
REGISTER