CSIDH: An efficient post-quantum commutative group action

Wouter Castryck, Tanja Lange, Chloe Martindale, Lorenz Panny, Joost Renes

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

247 Scopus citations

Abstract

We propose an efficient commutative group action suitable for non-interactive key exchange in a post-quantum setting. Our construction follows the layout of the Couveignes–Rostovtsev–Stolbunov cryptosystem, but we apply it to supersingular elliptic curves defined over a large prime field Fp, rather than to ordinary elliptic curves. The Diffie–Hellman scheme resulting from the group action allows for public-key validation at very little cost, runs reasonably fast in practice, and has public keys of only 64 bytes at a conjectured AES-128 security level, matching NIST’s post-quantum security category I.

Original languageEnglish
Title of host publicationAdvances in Cryptology – ASIACRYPT 2018 - 24th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings
EditorsThomas Peyrin, Steven Galbraith
PublisherSpringer Verlag
Pages395-427
Number of pages33
ISBN (Print)9783030033316
DOIs
StatePublished - 2018
Externally publishedYes
Event24th Annual International Conference on Theory and Application of Cryptology and Information Security, ASIACRYPT 2018 - Brisbane, Australia
Duration: 2 Dec 20186 Dec 2018

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11274 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference24th Annual International Conference on Theory and Application of Cryptology and Information Security, ASIACRYPT 2018
Country/TerritoryAustralia
CityBrisbane
Period2/12/186/12/18

Keywords

  • Class-group action
  • Isogeny-based cryptography
  • Key confirmation
  • Non-interactive key exchange
  • Post-quantum cryptography

Fingerprint

Dive into the research topics of 'CSIDH: An efficient post-quantum commutative group action'. Together they form a unique fingerprint.

Cite this