Breaking SIDH in Polynomial Time
Damien Robert
2023Year
158Citations
25Top-tier citations
Abstract
We show that we can break SIDH in (classical) polynomial time, even with a random starting curve 𝐸 0 .
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers25
- A Direct Key Recovery Attack on SIDHLuciano Maino, Chloe Martindale, Lorenz Panny, Giacomo Pope et al.EUROCRYPT 2023 · 136 citations
- SQIsignHD: New Dimensions in CryptographyPierrick Dartois, Antonin Leroux, Damien Robert, Benjamin WesolowskiEUROCRYPT 2024 · 69 citations
- M-SIDH and MD-SIDH: Countering SIDH Attacks by Masking InformationTako Boris Fouotsa, Tomoki Moriya, Christophe PetitEUROCRYPT 2023 · 52 citations
- New Algorithms for the Deuring Correspondence - Towards Practical and Secure SQISign SignaturesLuca De Feo, Antonin Leroux, Patrick Longa, Benjamin WesolowskiEUROCRYPT 2023 · 46 citations
- The Supersingular Endomorphism Ring and One Endomorphism Problems are EquivalentAurel Page, Benjamin WesolowskiEUROCRYPT 2024 · 28 citations
Builds on2
Related papers
- An Efficient Key Recovery Attack on SIDHWouter Castryck, Thomas DecruEUROCRYPT 2023 · 284 citations
- Towards Breaking the Half-Barrier of Local Leakage-Resilient Shamir's Secret SharingHai H. NguyenCRYPTO 2024 · 2 citations
- One-Way Functions and Malleability Oracles: Hidden Shift Attacks on Isogeny-Based ProtocolsPéter Kutas, Simon-Philipp Merz, Christophe Petit, Charlotte WeitkämperEUROCRYPT 2021 · 15 citations
- Sometimes-Decryptable Homomorphic Encryption from Sub-exponential DDHAbhishek Jain, Zhengzhong JinCRYPTO 2025 · 2 citations
- Rational Isogenies from Irrational EndomorphismsWouter Castryck, Lorenz Panny, Frederik VercauterenEUROCRYPT 2020 · 47 citations
